Editorial team – Page 29

Cutting the Wrong Wire: how a Clumsy Attacker Revealed a Global Cryptojacking Campaign

Botconf presentation or article / Editorial team

Cutting the Wrong Wire: how a Clumsy Attacker Revealed a Global Cryptojacking Campaign Botconf 2018 Wednesday | 12:30 – 12:50 Renato Marinho 🗣 We have seen a massive spike in malicious crypto mining campaigns killing themselves for the chance to have their victim’s CPU. The shorter and shorter time window between vulnerability disclosure and cryptojacking

Cutting the Wrong Wire: how a Clumsy Attacker Revealed a Global Cryptojacking Campaign Read More »

How Much Should You Pay for your own Botnet ?

Botconf presentation or article / Editorial team

How Much Should You Pay for your own Botnet ? Botconf 2018 Wednesday | 15:40 – 16:10 Antoine Rebstock 🗣 Cloud computing provides scalable and on-demand infrastructure, which seems to be the perfect way to host a botnet. This paper focuses on cloud-based botnets to perform legal DDoS resilience tests. We model the cost of

How Much Should You Pay for your own Botnet ? Read More »

Botception: Botnet distributes script with bot capabilities

Botconf presentation or article / Editorial team

Botception: Botnet distributes script with bot capabilities Botconf 2018 Thursday | 09:50 – 10:20 Jan Sirmer 🗣 | Adolf Středa 🗣 Monitoring botnets is a crucial component of cybersecurity, but it’s not everyday we see a botnet spreading scripts with bot capabilities. At the end of April 2018, while monitoring one of the branches of the Necurs

Botception: Botnet distributes script with bot capabilities Read More »

Trickbot The Trick is On You!

Botconf presentation or article / Editorial team

Trickbot The Trick is On You! Botconf 2018 Wednesday | 17:20 – 17:50 Floser Bacurio Jr. 🗣 | Joie Salvio 🗣 Bot malware landscape always changes with both new and old families being updated with new techniques to perform cybercrime. And due to their sheer number, manually analysing and tracking them is a tedious affair. This entails

Trickbot The Trick is On You! Read More »

Hunting and Detecting APTs using Sysmon and PowerShell Logging

Botconf presentation or article / Editorial team

Hunting and Detecting APTs using Sysmon and PowerShell Logging Botconf 2018 Thursday | 11:10 – 11:50 Tom Ueltschi 🗣 Many security professionals and Blue Team members appreciate a good and detailed written APT report by any renowned security company. This is especially true, if they document and explain some new and stealthy technique that was

Hunting and Detecting APTs using Sysmon and PowerShell Logging Read More »

Everything Panda Banker

Botconf presentation or article / Editorial team

Everything Panda Banker Botconf 2018 Thursday | 14:40 – 15:10 Dennis Schwarz 🗣 The Panda Banker malware was first spotted in the wild in early 2016. It has since seen consistent development, gained a significant threat actor user base, and has become one of the most advanced and persistent banking malwares in the current threat

Everything Panda Banker Read More »

Internals of a Spam Distribution Botnet

Botconf presentation or article / Editorial team

Internals of a Spam Distribution Botnet Botconf 2018 Thursday | 09:00 – 09:50 Jose Miguel Esparza 🗣 Cybercriminals use different methods to distribute malware like malicious advertisements, Exploit Kits, loaders or spam campaigns. Unless an attack is really targeted the bad guys will try to infect as many computers as possible and they need some

Internals of a Spam Distribution Botnet Read More »

The Dark Side of the ForSSHe

Botconf presentation or article / Editorial team

The Dark Side of the ForSSHe Botconf 2018 Thursday | 16:30 – 17:20 Romain Dumont 🗣 | Hugo Porcher 🗣 In February 2014, ESET researchers from Montreal published a report on a group who compromised more than 40,000 Linux servers worldwide since 2011. ESET named this campaign Windigo. At the centre of this operation, Ebury, an OpenSSH

The Dark Side of the ForSSHe Read More »

Mirai: Beyond the Aftermath

Botconf presentation or article / Editorial team

Mirai: Beyond the Aftermath Botconf 2018 Friday | 10:10 – 10:40 Rommel Joven 🗣 | David Maciejak | Jasper Manuel Two years have passed since Mirai unleashed its wrath to the world by targeting high profile victims. Many things have happened since then, the good, the author responsible has already been convicted, the bad, source code was released to

Mirai: Beyond the Aftermath Read More »

Leaving no Stone Unturned – in Search of HTTP Malware Distinctive Features

Botconf presentation or article / Editorial team

Leaving no Stone Unturned – in Search of HTTP Malware Distinctive Features Botconf 2018 Friday | 11:10 – 11:50 Piotr Białczak 🗣 When we analyze malware C&C network traffic we often see that it contains HTTP protocol. Sometimes the messages are obfuscated and sometimes sent as plain text. They can be intentionally crafted to look

Leaving no Stone Unturned – in Search of HTTP Malware Distinctive Features Read More »