Botconf 2022 – Page 4

Operation GamblingPuppet: Analysis of a multivector and multiplatform campaign targeting online gambling customers

Botconf presentation or article / Editorial team

Operation GamblingPuppet: Analysis of a multivector and multiplatform campaign targeting online gambling customers Botconf 2022 Wednesday | 15:00 – 15:30 Jaromír Hořejší 🗣 | Daniel Lunghi 🗣 Despite being illegal in some countries, global online gambling industry growths steadily year after year, flourishing in current environment dominated by the global pandemic. This trend was not surprisingly noticed […]

Operation GamblingPuppet: Analysis of a multivector and multiplatform campaign targeting online gambling customers Read More »

Fingerprinting Bot Shops: Venues, Stealers, Sellers

Botconf presentation or article / Editorial team

Fingerprinting Bot Shops: Venues, Stealers, Sellers Botconf 2022 Wednesday | 16:00 – 16:50 Bryan Oliver 🗣 | Austin Turecek 🗣 | Ian Gray Carding is one of the earliest forms of cybercrime. Since the 1980s, cybercriminals have developed various fraud tactics to steal and monetize credit card information. To prevent these types of attacks, financial institutions have developed anti-fraud

Fingerprinting Bot Shops: Venues, Stealers, Sellers Read More »

How to Eavesdrop on Winnti in a Live Environment Using Virtual Machine Introspection (VMI)

Botconf presentation or article / Editorial team

How to Eavesdrop on Winnti in a Live Environment Using Virtual Machine Introspection (VMI) Botconf 2022 Wednesday | 16:55 – 17:35 Philipp Barthel 🗣 | Sebastian Eydam 🗣 | Werner Haas | Sebastian Manns This paper explains how we used VMI to detect an infection with the remote access trojan Winnti, specifically version 3.0, and how to extract and decrypt its

How to Eavesdrop on Winnti in a Live Environment Using Virtual Machine Introspection (VMI) Read More »

Evolution of the Sysrv mining botnet

Botconf presentation or article / Editorial team

Evolution of the Sysrv mining botnet Botconf 2022 Wednesday | 17:39 – 18:30 György Lupták 🗣 | Dorka Palotay 🗣 | Albert Zsigovits Sysrv-hello, or shortly Sysrv, is a botnet, which was first discovered in late December of 2020. The malware is written in Golang and targets both Linux and Windows endpoints. Based on its propagation style, it is

Evolution of the Sysrv mining botnet Read More »

Identifying malware campaigns on a budget

Botconf presentation or article / Editorial team

Identifying malware campaigns on a budget Botconf 2022 Thursday | 09:05 – 09:25 Max ‘Libra’ Kersten 🗣 | Rens van der Linden 🗣 Malware campaigns plague enterprises, entrepreneurs, and individuals. Platforms and tools have been deployed to gain insight into the ongoing situation. Unfortunately, many of these platforms are rather pricey, which is a problem for me,

Identifying malware campaigns on a budget Read More »

See ya Sharp: A Loader’s Tale

Botconf presentation or article / Editorial team

See ya Sharp: A Loader’s Tale Botconf 2022 Thursday | 09:30 – 10:00 Max ‘Libra’ Kersten 🗣 Simply distributing malware is not a viable strategy anymore for criminal actors. To combat the ever increasing defense mechanisms, malicious loaders are used. These loaders are meant to conceal the final payload from the prying eyes of anti-virus

See ya Sharp: A Loader’s Tale Read More »

Into The Silent Night

Botconf presentation or article / Editorial team

Into The Silent Night Botconf 2022 Thursday | 10:35 – 11:00 Yuta Sawabe 🗣 | Ryuichi Tanabe 🗣 | Fumio Ozawa | Rintaro Koike Since December 2019, Zloader had revived as “Silent Night”, and it has been used various attack campaigns. It has especially been used in two attack campaigns (PseudoGate and Malsmoke). These attack campaigns are aimed at users in

Into The Silent Night Read More »

A fresh look into the underground card shop ecosystem

Botconf presentation or article / Editorial team

A fresh look into the underground card shop ecosystem Botconf 2022 Thursday | 11:00 – 11:30 Beatriz Pimenta Klein 🗣 | Lidia López Sanz 🗣 Law enforcement has seized multiple card shops during recent years. However, every time there is a gap in the card shop business due to law enforcement countermeasures, exit scam from the market

A fresh look into the underground card shop ecosystem Read More »

Mastering Advanced Memory Analysis For Fun & Profit

Botconf presentation or article / Editorial team

Mastering Advanced Memory Analysis For Fun & Profit Botconf 2022 Tuesday | 12:00 – 18:30 Solomon Sonya 🗣 Malware continues to advance in sophistication and prevalence. Well-engineered malware can obfuscate itself from the user, network, and even the operating system running host-based security applications. But one place malware cannot easily hide itself is within volatile

Mastering Advanced Memory Analysis For Fun & Profit Read More »

mwdb: open source tools to build your malware analysis pipeline

Botconf presentation or article / Editorial team

mwdb: open source tools to build your malware analysis pipeline Botconf 2022 Tuesday | 14:00 – 18:30 Michał Praszmo 🗣 | Paweł Srokosz 🗣 | Paweł Pawliński 🗣 During almost a decade of our malware analysis experience in cert.pl, we have tried many different approaches. Most of them failed but we have learned a lot about what works and

mwdb: open source tools to build your malware analysis pipeline Read More »