Bonded with Botnets. - SecNiche Security Labs

More documents

Recommendations

Info

Disclaimer The opinions and views expressed in this presentation are completely based on our independent research and do not relate to any of our previous or present employers. 4
Generations of <strong>Botnets</strong> • First Generation ─ Internet Relay Chat (IRC) Protocol • Second Generation ─ Peer-to-Peer (P2P) Protocol • Third Generation ─ Hyper Text Transfer Protocol (HTTP) • Hybrid ─ Mix of characteristics of different generations of botnets 5
Page 1 and 2: Bonded with Botnets Hard to Capture
Page 3: Agenda • Overview • Present-day
Page 7 and 8: Malware Paradigm 7
Page 9 and 10: Obfuscated Iframes - Present-day
Page 11 and 12: BlackHole BEP • 11
Page 13 and 14: Redkit BEP 13
Page 15 and 16: Drive-by-Download Attacks • Drive
Page 17 and 18: Drive-by Frameworks 17
Page 19 and 20: Install-by-Install (IBI) • Instal
Page 21 and 22: • Malvertisement Malvertisements
Page 23 and 24: • Social Networks Exploiting Soci
Page 25 and 26: Tactics - Subverting System’s Int
Page 27 and 28: Understanding Ruskill • Inside Ru
Page 29 and 30: • DNS Changer ─ How this works?
Page 31 and 32: Demo 31
Page 33 and 34: • Inside MitB Man-in-the-Browser
Page 35 and 36: • Web Injects Web Injects ─ Bas
Page 37 and 38: Web Injects - Real Time Cases (1) F
Page 39 and 40: • Form Grabbing Form-grabbing ─
Page 41 and 42: Form-grabbing • Harvested Data Ha
Page 43 and 44: Conclusion • Continuous war of ex
Page 45: Thanks • US-CERT GFIRST Team ●

Bonded with Botnets. - SecNiche Security Labs

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?