Hackers shoveled snow for company, were rewarded with network admin access
A group of hackers who helped a company by shoveling snow were rewarded with network administrator access, which they then used to compromise the company's systems.
Background
The Register reports on a social engineering attack that began with an attacker physically shoveling snow outside a company's office. Doing real, unpaid manual labor built rapport with employees, who eventually gave him access to sensitive IT systems. This underscores the underappreciated threat of "physical social engineering" — attacks that rely on face-to-face manipulation and real-world props (performing a helpful task, wearing a uniform, carrying a clipboard) rather than phishing emails or software exploits. It's a reminder that perimeter security is only as strong as the trust a stranger can earn in a parking lot.