Click. Click. Fake it until they make it… inside

This report describes how attackers can 'live off the internet' to produce convincing fake corporate identifiers (lanyards, ID badges, branded PPE, clothing, letterheads, key fobs, etc.) to facilitate physical access through social engineering, lists items used in engagements, and recommends mitigations such as stricter colour/pantone controls, anti-counterfeit features, controlled vendors, inventory protection, and staff training to spot fakes.