Botconf 2016

Language Agnostic Botnet Detection Based on ESOM and DNS

Botconf presentation or article / Editorial team

Language Agnostic Botnet Detection Based on ESOM and DNS Botconf 2016 Wednesday | 15:10 – 15:30 Christian Dietz 🗣 | Rocco Mandrysch 🗣 | Urs Anliker | Gabi Dreo Botnets enable various cyber-criminal activities, like DDoS, banking fraud, data theft and extortion. Current botnet detection approaches face many challenges, for example, peer-to-peer infrastructures and domain fast-flux or encrypt the command and […]

Language Agnostic Botnet Detection Based on ESOM and DNS Read More »

Browser-based Malware: Evolution and Prevention

Botconf presentation or article / Editorial team

Browser-based Malware: Evolution and Prevention Botconf 2016 Wednesday | 14:35 – 15:05 Andrey Kovalev 🗣 | Evgeny Sidorov 🗣 Nowadays web technologies allow users to make a lot of their work online. Cloud services, social networks, online games etc. are gaining more and more popularity and are replaicing desktop applications and offline stuff. Web-browsers also offer special

Browser-based Malware: Evolution and Prevention Read More »

LURK – The Story about Five Years of Activity

Botconf presentation or article / Editorial team

LURK – The Story about Five Years of Activity Botconf 2016 Wednesday | 14:00 – 14:30 Vladimir Kropotov 🗣 | Fyodor Yarochkin 🗣 Lurk activity was solely in Russia slince late 2011, but the technologies they use became noisy, when it appeared in the “World Market” years later. We were able to track activity despite the low

LURK – The Story about Five Years of Activity Read More »

Visiting the Bear’s Den

Botconf presentation or article / Editorial team

Visiting the Bear’s Den Botconf 2016 Wednesday | 12:05 – 12:55 Jessy Campos 🗣 | Joan Calvet 🗣 Sednit, a.k.a. Fancy Bear/APT28/Sofacy, is a group of attackers operating since at least 2004 and whose main objective is to steal confidential information from specific targets. Over the past two years, this group’s activity increased significantly, in particular with

Visiting the Bear’s Den Read More »

Locky, Dridex, Necurs: the evil triad

Botconf presentation or article / Editorial team

Locky, Dridex, Necurs: the evil triad Botconf 2016 Wednesday | 11:20 – 12:00 Jean-Michel Picod 🗣 While Locky and Dridex inner working are well understood as they have been on the news all year long, how their distribution system operate is still relatively unknown as it is only seen by email providers.In this talk we

Locky, Dridex, Necurs: the evil triad Read More »

Getting Your Hands Dirty: How to Analyze the Behavior of Malware Traffic and Web Connections

Botconf presentation or article / Editorial team

Getting Your Hands Dirty: How to Analyze the Behavior of Malware Traffic and Web Connections Botconf 2016 Tuesday | 14:00 – 17:30 Veronica Valeros 🗣 | Sebastián García 🗣 Nowadays there are a lot of tools to analyze traffic, but the most important thing to have is the experience and knowledge of a malware analyst. The goal

Getting Your Hands Dirty: How to Analyze the Behavior of Malware Traffic and Web Connections Read More »

MISP, the Threat Sharing Platform, a Developer Perspective to Extensions and Collaboration

Botconf presentation or article / Editorial team

MISP, the Threat Sharing Platform, a Developer Perspective to Extensions and Collaboration Botconf 2016 Tuesday | 14:00 – 17:30 Alexandre Dulaunoy 🗣 | Andras Iklody 🗣 MISP is becoming a key open source package for indicator and threat sharing in the information security community. MISP improved its modularity in the recent versions and propose various ways to

MISP, the Threat Sharing Platform, a Developer Perspective to Extensions and Collaboration Read More »

Cracking Banking Fraud

Botconf presentation or article / Editorial team

Cracking Banking Fraud Botconf 2016 Tuesday | 14:00 – 17:30 Pavel Asinovsky 🗣 | Magal Baz 🗣 This workshop takes us into the world of banking malware, and more specifically into researchers’ chase after configurations – the attack books that dictate which banks are targeted and how. These precious ever-changing fragments of data and the continuous change

Cracking Banking Fraud Read More »

FastIR Collector

Botconf presentation or article / Editorial team

FastIR Collector Botconf 2016 Tuesday | 10:30 – 12:30 Sébastien Larinier 🗣 The goal of the wokshop is to present and use the open source live forensic collector FastIR on differents cases investigations on Windows: RAT with tricks anti forensics, rootkits, Trojan with dll injections… And we’ll present new features we have developped this year

FastIR Collector Read More »

Editorial team

Botconf 2016 29th November – 2nd December 2016, Lyon 280 participants from all around the world 28 presentations and 3 workshops 4 days of exchanges, discussions and making new friends! Botconf 2015 Botconf 2017 Schedule Tuesday 29th November 2016 10:30 – 12:30 FastIR Collector Sébastien Larinier 🗣 Abstract (click to view) The goal of the

Botconf 2016 Read More »