Thursday 1 December 2011

RSE Advertising Methods

Here are five general advertising techniques that can be used to get them to call you:
Switch notes. If you see a slip of paper taped to or nearby the computer, with the phone number of the computing department, get rid of it and slip a note with your own phone number in its place (or some number at which you can wait for a call from them). Elite hackers will simply dial into their local telco computers and
change the number of a local pay phone to the listed computer help desk number.

Also look for business cards and Rolodex numbers to either hide or switch. Post a public message. On a bulletin board (thumbtack style, not electronic!) put up a huge, brightly colored, professional-looking sign that says something along these lines:

Technical Helpline

COMPUTER PROBLEMS?
CALL US FREE AT
OUR NEW NUMBER:
(123) ABC-WXYZ

Technical Helpline

Be sure to put the name of the company you're hacking, and their address and logo somewhere on the poster to make it look like it's endorsed by the company. Put these signs up all over, or drop them as flyers on people's desks, especially in view of the computers you sabotaged.

Social engineering. Call up the day before - or even a few hours before - the sabotage and tell the person who answers about the computing department's new phone number helpline (your number). Ask whoever answers to Put it in the Rolodex, or to keep it otherwise close by and handy for whenever anyone needs it.
Ask if he or she is the only one who uses that terminal; if the answer is "no," tell the person to make sure others know about the new number too.

Directory tailoring. Get a company's internal phone directory and add your number to the list, either by crossing out the existing technical support line and writing in your own, or by inserting a visible printed addendum to the book. On-line advertising. When doing the initial sabotage, see if you can post a note on
the bulletin board (electronic this time!) concerning your computer helpline. Alternately, have part of the sabotage program give out the phone number. For example, rename WREXE, then create a simulated word processor which crashes to the operating system after the first few keystrokes, leaving behind garbled
characters and colors, and this message:

<Beep!>
XERROR 3 --- Consult fdox 900.2a or call Jim at technical support @ (123) ABCWXYZ

In your advertisements, make sure the user realizes it is an outside line they are calling (so they know to dial 9 or 2 or whatever to exit the company PBX). That is, do that unless you have managed to appropriate an inside office or phone (by sneaking into an office while someone's away on vacation, for example).