Editorial team – Page 42

Using a Cryptographic Weakness for Malware Traffic Clustering and IDS Rule Generation

Botconf presentation or article / Editorial team

Using a Cryptographic Weakness for Malware Traffic Clustering and IDS Rule Generation Botconf 2019 Friday | 14:00 – 14:30 Matthijs Bomhoff 🗣 | Saskia Hoogma 🗣 Encrypted C&C data can make the life of malware analysts and incident handlers a lot harder, as it can make C&C traffic a lot harder to recognise, when done right. Fortunately, […]

Using a Cryptographic Weakness for Malware Traffic Clustering and IDS Rule Generation Read More »

Emotet : WordPress Compromises at Scale

Botconf presentation or article / Editorial team

Emotet : WordPress Compromises at Scale Botconf 2019 Friday | 14:35 – 15:05 Sébastien Mériot 🗣 The Emotet banking trojan has been studied by many researchers since it was first discovered in 2014. In particular, the infection scheme and the Command & Control architecture are both pretty well documented. However, few researchers investigated the way

Emotet : WordPress Compromises at Scale Read More »

Zen: a Complex Campaign of Harmful Android Apps

Botconf presentation or article / Editorial team

Zen: a Complex Campaign of Harmful Android Apps Botconf 2019 Friday | 15:10 – 15:50 Łukasz Siewierski 🗣 Android malware authors go to great lengths to come up with increasingly clever ways to monetise their apps. The author (or a group) presented during my talk shows quite the range, from simply repacking apps with a

Zen: a Complex Campaign of Harmful Android Apps Read More »

Malspam is different spam

Botconf presentation or article / Editorial team

Malspam is different spam Botconf 2019 Friday | 15:55 – 16:25 Martijn Grooten 🗣 Malspam’ (an umbrella term for spam campaigns that deliver malware or send users to phishing sites) has long been the prominent way for individuals and organisations to get themselves infected. These campaigns are opportunistic (i.e. non targeted), which distinguishes them from

Malspam is different spam Read More »

Demystifying Banking Trojans from Latin America

Botconf presentation or article / Editorial team

Demystifying Banking Trojans from Latin America Botconf 2019 Friday | 16:30 – 17:00 Juraj Horňák 🗣 | Jakub Souček 🗣 | Martin Jirkal 🗣 At the end of 2018, it has been reported that Latin America suffers approximately 3.7 million cyber-attacks per day. Even the most well-known pieces of malware, such as TrickBot or Emotet, have their eyes set

Demystifying Banking Trojans from Latin America Read More »

Suricata for bot hunting and classification

Botconf presentation or article / Editorial team

Suricata for bot hunting and classification Botconf 2019 Tuesday | 14:00 – 17:30 Tatyana Shishkova 🗣 One of the distinguishing features of botnets is communication between the bot and the C&C server. Analyzing network traffic is a part of researching a botnet. Suricata, an open-source network threat detection engine, is a powerful tool not only

Suricata for bot hunting and classification Read More »

Static Android Malware Analysis Workshop

Botconf presentation or article / Editorial team

Static Android Malware Analysis Workshop Botconf 2019 Tuesday | 14:00 – 17:30 Max ‘Libra’ Kersten 🗣 Mobile phones are used more and more in our daily lives. Purely based on someone’s phone, one can find a lot of information: GPS data, chat history, photos, notes, and online banking applications. Because of this, mobile phones are

Static Android Malware Analysis Workshop Read More »

DeStroid – Fighting String Encryption in Android Malware

Botconf presentation or article / Editorial team

DeStroid – Fighting String Encryption in Android Malware Botconf 2019 Wednesday | 10:45 – 11:15 Daniel Baier 🗣 | Martin Lambertz 🗣 In this paper we present DeStroid, an approach to fully automatically decrypt obfuscated strings from Android apps. We focus in particular on current Android malware using advanced string encryption techniques and show that DeStroid outperforms

DeStroid – Fighting String Encryption in Android Malware Read More »

Golden Chickens: Uncovering A Malware-as-a-Service (MaaS) Provider and Two New Threat Actors Using It

Botconf presentation or article / Editorial team

Golden Chickens: Uncovering A Malware-as-a-Service (MaaS) Provider and Two New Threat Actors Using It Botconf 2019 Wednesday | 11:20 – 12:00 Marco Riccardi 🗣 | Chaz Hobson 🗣 | Allison Ebel 🗣 …/… Edit

Golden Chickens: Uncovering A Malware-as-a-Service (MaaS) Provider and Two New Threat Actors Using It Read More »

Unrevealing the Architecture Behind the Counter-Strike 1.6 Botnet: Zero-Days and Trojans

Botconf presentation or article / Editorial team

Unrevealing the Architecture Behind the Counter-Strike 1.6 Botnet: Zero-Days and Trojans Botconf 2019 Wednesday | 12:05 – 12:35 Ivan Korolev 🗣 | Igor Zdobnov 🗣 The Belonard Botnet was designed to promote servers in Counter-Strike 1.6. In order to achieve that, the botmaster employed the Belonard Trojan, which was spread via malicious game server; an infected pirated

Unrevealing the Architecture Behind the Counter-Strike 1.6 Botnet: Zero-Days and Trojans Read More »