Using Cloud Services for Dial In Reconnaissance Automation

Alina Dorina demonstrates how modern cloud services can be automated to perform scalable reconnaissance and intelligence gathering against corporate dial-in teleconferences and virtual meeting bridges.

[03:00] Dorina discusses the operational security risks associated with enterprise teleconference systems, noting that many corporate all-hands meetings, status briefings, and training sessions rely on static or predictable bridge IDs and PIN numbers with no individual caller verification. This lack of authentication allows unauthorized parties to dial in silently and listen to proprietary discussions.

[08:27] The presentation details the architecture of an automated serverless reconnaissance pipeline deployed on AWS. The solution integrates AWS Cognito for user authentication, Amazon Connect to programmatically initiate outbound telephony calls to conference bridges, and AWS Lambda to orchestrate the dial-in sequences and transfer audio recordings into Amazon S3 buckets. Once recorded, the audio is processed using Amazon Transcribe [13:29] to automatically generate searchable text transcripts. Dorina demonstrates how this automated pipeline extracts sensitive corporate discussions [18:33] and concludes with remediation guidance [19:47], emphasizing dynamic meeting passwords, host validation, and continuous caller auditing.

(AI summary — Gemini Flash)