What Just Happened?
System Information Captured:
- Computer Name: Loading...
- User Account: Loading...
- Time of Compromise: Loading...
Your workstation was left unattended and unlocked. In that time, an unauthorised USB device was connected to your computer and executed code without your knowledge or consent.
This page was opened automatically through a script injected by that device.
If this had been a real attack an attacker could have:
- Installed malware or ransomware
- Stolen sensitive data and credentials
- Established persistent remote access to your system
- Gained access to network resources using your credentials
- Compromised not just your system, but potentially the entire organisation
This Is Only A Test
Don't worry - no harm has been done to your system. This is part of a security awareness exercise conducted by your organisation's security team.
However, this demonstration illustrates a real vulnerability:
It took less than 10 seconds to execute this script after finding your unattended workstation. A real attacker would have had the same opportunity.
Your IT Security team will be in contact with you shortly to discuss this demonstration and provide additional security training.
Security Best Practices
- Always lock your computer when stepping away, even for a moment (Windows key + L)
- Be suspicious of unknown USB devices and never insert unknown drives into your computer
- Report security incidents immediately to your security team
- Maintain awareness of your physical surroundings and who has access to your workspace