+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: What are those "scans" people offer? (/Thread-What-are-those-scans-people-offer)
Pages:
1
2
RE: What are those "scans" people offer? - bigsg - 03-05-2023
okay so does anyone have a reliable source for dhl scans?
RE: What are those "scans" people offer? - 2ndround - 03-06-2023
(03-05-2023, 05:04 AM)Endeavor Wrote:(03-05-2023, 12:56 AM)mothered Wrote:(03-05-2023, 12:02 AM)KingDead Wrote: These things are usually an inside job at courier service.^ Nailed It.
Almost every service has an Insider working for them.
+1
Imagine you're a warehouse worker getting paid almost minimum wage doing strenuous labor. You see an opportunity to do something that's a click of a button for you, but you get a decent payout for each scan done. Lets say each scan for you cost 50 bucks, and one person does around 50 scans a day.
That's $2500 in a day. You can already imagine why an insider would consider this...
Every change in a corporation is trackable.
If the change would be made by a person in customer service with an ERP tool this would be trackable with the username that was logged in.
If a courier who was out for delivery and changed the status this would be trackable, if someone at the depot made a change in the system this would be trackable.
I really wonder how this is done practically and how an insider can get away with doing this more than a few times.
If they made daily changes this will be flagged as this be an exceptional event.
If someone internally notices and eventually they will, the insider will be questioned.
If they made a few changes they could get away with it.
Regardless for internal questioning and auditing I do not see how they would not need to provide proof of why they made such changes in the system.
For example when courier says that a package was delivered and the tracking says that it was returned to sender.
This is grounds to fire that person and even take legal actions against them for fraud.
Overall I don't see how this can be a long term strategy and wonder who has the needed access to make such changes in the system.