Visiting infected adult content by employee caused dataleak at USGS

Digital forensic examination revealed that an employee had an extensive history of visiting adult pornography websites. Many of the 9,000 web pages visited routed through websites that originated in Russia and contained malware. The analysis confirmed that many of the pornographic images were subsequently saved to an unauthorized USB device and personal Android cellphone connected to the US-Government- issued computer.

During the investigation two vulnerabilities were identified in USGS’s IT security: website access and open USB ports. What do you do to prevent malware damaging or disabling your computers or mobile phones or to prevent data being leaked or stolen?

 

For the original report please visit: https://www.oversight.gov/sites/default/files/oig-reports/ManagementAdvisory%20_USGSITSecurityVulnerabilities_101718_0.pdf

Leave a Comment