Supporting Elcoin Through Penetration Testing

CEO, Sergejs Svircenkovs, recognised the need for an independent validation of Elcoin’s security posture across their separate mobile banking, internet banking and back-office CRM servers. They sought a penetration testing partner to provide testing excellence and suitable value for money, where work with previous suppliers had failed to deliver. 

Elcoin’s requirements included: 

• Identification of gaps in their security posture and functions.

• Restriction of access to new platforms and assets.

• Live testing of their new technology.

The solution included:

• Pre-engagement analysis, detailed intelligence gathering, agreement of scope, methodology and planning controls.
• Vulnerability analysis through active reconnaissance - methods including configuration reviews, port and vulnerability scanning.
• Vulnerability identification and exploitation to confirm the threat level.
• All available means to gain the highest privileges on the vulnerable targets - including misconfigured services and permissions.
• Grey Box penetration testing with code supplied by Elcoin, to help identify threats faster.
• Removal of all scripts, backdoors, .EXE files and user accounts made during the assessment to keep the Elcoin environment clean after the testing.
• Detailed reporting - findings, recommendations and remediations.