Python and Machine Learning: How to Clusterize a Malware Dataset Botconf 2017 Tuesday | 14:00 – 18:00 Sébastien Larinier 🗣 The goal of this workshop is to present how to use python to make machine learning. We take examples of security data like malware and we explain how to transform data to use algorithms of …
Python and Machine Learning: How to Clusterize a Malware Dataset Read More »
Formatting for Justice: Crime Doesn’t Pay, Neither Does Rich Text Botconf 2017 Friday | 09:40 – 10:10 Anthony Kasza 🗣 Due to it’s flexibility and capacity for embedding other objects, the rich text format (RTF) is a preferred file type used by both precision and quantity focused threat actors. This presentation will discuss the state …
Formatting for Justice: Crime Doesn’t Pay, Neither Does Rich Text Read More »
PWS, Common, Ugly but Effective Botconf 2017 Friday | 10:10 – 10:40 Paul Jung 🗣 PassWord Stealer (PWS) are around since more than a decade now. They are legions. Some like Pony, aka FareIT are well known. But nobody takes really time to explain what is around, what it is capable of and how this …
Nyetya Malware & MeDoc Connection Botconf 2017 Friday | 11:10 – 11:50 Paul Rascagnères 🗣 | David Maynor 🗣 The 27th of June 2017, a new wormable malware variant has surfaced. Talos is identifying this new malware variant as Nyetya. The sample leverages EternalBlue, EternalRomance, WMI, and PsExec for lateral movement inside an affected network. The presentation …
Math + GPU + DNS = Cracking Locky Seeds in Real Time without Analyzing Samples Botconf 2017 Friday | 11:50 – 12:30 Yohai Einav 🗣 | Hongliang Liu | Alexey Sarychev We propose and implement a sublinear hash-collision method on a GPU to search for dynamic Locky DGA seed in real-time DNS query traffic. By combining real-time DNS traffic …
Math + GPU + DNS = Cracking Locky Seeds in Real Time without Analyzing Samples Read More »
Botconf 2017 5th – 8th December 2017, Montpellier 280 participants from all around the world 28 presentations and 3 workshops 4 days of exchanges, discussions and making new friends! Botconf 2016 Botconf 2018 Schedule Tuesday 5th December 2017 14:00 – 18:00 Botnet Tracking and Data Analysis Using Open-Source Tools Olivier Bilodeau 🗣 | Masarah Paquet-Clouston 🗣 Abstract …