Preventing financial damage through Red Team Assessment

The client, a large retail and commercial bank, wanted to understand its exposure to advanced and sophisticated cyber-attack tools, techniques and procedures. The client had grown organically and had amassed various technology infrastructure and capabilities along the way. The Board of Directors wanted to understand the bank’s security capability to identify and respond to high-profile sophisticated attacks.

Zacco was engaged to conduct a full-scale Red Team Assessment on all layers of the bank’s operations. Various attempts were established to gain access into the client’s internal network, e.g. by using promotional offerings as a bait. Using various approaches of information gathering, social engineering and phishing to extract sensitive information from the financial institute, Zacco gained access to sensitive information. If conducted by a real-world adversary, it would have represented a severe breach, financial damages and harm to the client’s brand.