I know it's something we're not supposed to talk about and we should all be under cover (is this fight-club?!), but it's so much fun and there are so many areas to tap into to just keep it hush-hush!
Depending on the employee's seniority and job title, orders can come from multiple people/departments:
- Company Owners
- Audit Department
- General Managers
- Department Manager
My company has been unfortunate to have had multiple naughty employees and managers in which high management had to resort back to us, Black Ops, to uncover/retrieve a piece of evidence and in other cases erase records of an error one of the higher ups made so it wouldn't expose sensitive information.
At one time, highest management asked to stalk someone's corporate email and sniff news of certain criteria, along with gathering information from that employee's machine that may indicate incriminating behavior.
At that time, only 3 people knew about the operation: The top manager and the 2 Black Ops involved, and it remained that way until that employee was fired (even though we stopped looking for info a bit before that).
The fun of having such a job is that it doesn't rely on technical skills only, but on social engineering ones as well. You'd have to create an undeniable and convincing diversion at the right time for the right people to be able to achieve total stealth.
My company doesn't have VoIP deployed, yet, so we're still not required to snoop on phone calls as well (which would be quite annoying to us), but I guess it's inevitable. I hope someone comes up with a decent sound-processing software that can look for certain words in voice files before we're asked to fish for voice packets!
You can't tell whether it's an actual problem, or if it's us putting on our black hats and chuckling at your private chats with many guys pretending to be girls. Why not? Simply because our diversion is either a common problem, or we create such issues once in a while just in case we needed a diversion one day. By the time you, a naughty employee, sense a snooping act, it would be too late.
A tiny network outage, a printer driver reinstallation, sudden Operating System freezes, stealth installation of a piece of software or a background job, a quick computer restart, ...etc.
Rogue Black Ops are a bigger problem to companies than dirty & naughty employees themselves. This kind either sniffs data for fun, blackmailing or a dirty/naughty employee had bribed them to erase records of evidence (of which they keep a copy to blackmail the dumb employee later).
The only way to fight rogue Black Ops is by enforcing tight auditing on all IT infrastructure: VPN Access times, over-time claims, assigning an entry-level administrator to handle the VPN server (to make sure he doesn't have the experience to cover evidence nor having formed a relation with existing staff).
Ironically, the above may also interfere with investigating a rogue audit employee!
The company owns the data
We pwn you
Weep, threat, cry and fret
We pity the fool
We pwn you
Weep, threat, cry and fret
We pity the fool
Got stories to share? Kindly post as Anonymous ;)
