The network is hacked with a camouflaged camouflage as a power supply unit

It rarely happens that you are hacked while you are on the Internet in your daily life, but this is hard if you have a spy to invite an attacker inside your house. Overseas, there seems to be a device that hacks the network with a face like a power plug or AC adapter.

The Little White Box That Can Hack Your Network | Wired Enterprise | Wired.com

Pwnie Express :: Wired, wireless, and 3G pentesting dropboxes

Last May, a man named Jayson E. Street asked the bank's branch office. This man, who was dressed like a professional, talked about stabilizing the power supply and attached a small white box like AC adapter to the outlet. This work done at 10 branches on the west coast was of course a lie. The bankers were too cooperative too. Allowing Street to go near the cashier and go to the cellar, the branch manager himself made a chair to make it easier to install the device behind himself. At this time, what Street was installing was a device called "Pwn Plug". Pwn is used in the hacker terminology as "take control of". After security broke through four branches, this bank raised the white flag saying "I quit now, I am surrendering."

An example of what Street installed was like this. It is hard to understand what is wrong, but the one like a white AC adapter is a problem device.


What Street did was the same thing that security experts do to find problems. A small computer is built in "Pwn Plug" created by a startup company called Pwnie Express, and a hacking tool is preinstalled. This will allow you to enter the network and remotely access the network. In order to prevent people from doubting the equipment, the letters of "fressh" (with fresh and SSH?) And a design like a sprout are given and faked as if it is an air purifier It was. The basic model is $ 480 (about 39,000 yen), and if it is an elite model that you can buy at 730 dollars (about 50,500 yen) you can also connect to the mobile network.


"The interesting part of this product is in the place where it seems to be a power plug and it is Pwn", said Dave Porcello, CEO of Pwnie Express. "Please go into some building and insert the Pwn Plug into an outlet and wait until a text message arrives and you will see that the Pwn Plug will start to work while you get back to the parking lot."

Originally Pwn Plug is a compact Linux machine shaped like a power plug made by Globalscale Technologies "SheevaPlugsWhat I came up with when I saw ". Bank of America is now also posting a Pwn Plug to plug it into an outlet to check the network security of the local branch. Another ISP seems to use it for remote connection for use in network troubleshooting. "With Pwn Plug, companies can save money," Porcello said. "A large chain store has thousands of stores and each store forms one network, but it is a matter of going all the way to fly the security of those shops to unannounced It's wasteful too. "


Mr. Porcello began making Pwn Plug in 2010, when he was still working for an insurance company. However, Pwn Plug seems to have sold at about the momentum that he will be okay if he quits the insurance company as easily as possible.