Optimized Mal-Ops Hack ad networks like a boss
|
|
|
- Esmond Hoover
- 8 years ago
- Views:
Transcription
1 Optimized Mal-Ops Hack ad networks like a boss Vadim KOTOV Rahul KASHYAP Virus Bulletin Seattle 2014
2 Agenda What is malvertising? Why is it STILL prevalent? Mal-ops on YouTube Maaads Malware as an Ad service Dissecting a real world sample Hack like a boss live demo
3 About Bromium Labs Virtualization Kernel mode and malware analysis Offensive and defensive security research
4 What is Malvertising? User Web site with ads on it User metadata Redirect Drive-by-download Malicious Banner Advertiser Malicious Banner Attacker
5 Recent Incidents we ve captured Qyer.com Dictionary.com Answers.com Yahoo.com Jun Jul Aug Sep
6 Why is it STILL prevalent? High volumes of ads challenge to scrub all Rich media content is powerful enough to hide, obfuscate and execute malicious code Dynamic nature of web advertising makes it hard to pinpoint the source
7 MalOps on YouTube
8 YouTube Safe Browsing Diagnostic
9 MaaS (Malware as a Service) Check against AVs Malware executables for sale Obfuscation services Exploit kits to rent Traffic i.e. spots on websites Encrypt / pack Arm Deploy Attack!
10 Most kits usually serve public exploits (0-days are rarely the case) Their efficiency depends on how vulnerable victim machines are Attacker has to find a web site with the high rates of unpatched visitors There are many other constraints: language, country, OS etc. But in classic watering whole scenario attacker can not choose the traffic! It s all about traffic
11 MaaAdS (Malware as an Ads service) Pay for banner spots on millions of web sites no watering hole needed Extensive targeting criteria: country, language, OS, browser, topic of interest and more far superior than any of exploit kit s targeting You still have JavaScript J
12 Flash Platform Brief Action Script Virtual Machine Used in multimedia / animation / games Object oriented Important classes: ExternalInterface allows calling JS functions on the web page ByteArray allows manipulating raw data (put your shellcode there) Loader load SWFs and images from the URL or raw bytes BitmapData complete control of images
13 Malicious Banner Workflow SWF Check the attack triggering condition (e.g. date) <embed>, flashvars HTML Embed SWF banner into page Fingerprint OS and browser ExternalInterface.call navigator.useragnet De-obfuscate payload ExternalInterface.call function() { }
14 External Interface ExternalInterface.available - always available for ads ExternalInterface.call(js_function)- calls predefined JS function ExternalInterface.call( function(){<js code>} ) executes any arbitrary JS code Approach: hide your code somewhere in SWF and run using ExternalInterface!
15 Hiding Data public class [] extends ByteArray { public function [] (){ super(); } }
16 Data obfuscation for(var i:int = 0; i < payload.length; i++) bytes.writeunsignedint(payload[i] ^ key); bytes.length = 3344; ldr_context = new LoaderContext(); loader = new Loader(); loader.loadbytes(bytes, ldr_context); ByteArray allows manipulating raw data Loader allows rendering SWF from ByteArray
17 Hack Like a Boss: Live Demo Let s use steganography to hide the malicious code Use one of the compressed formats (GIF, JPEG, PNG) Hide code bit by bit in pixel color values Pixel manipulation is hard to detect without source image
18 Attack workflow Load PNG to the Flash movie Extract JS code using BtimapData Execute via ExternalInterface function(){ var iframe=document.createelement("iframe"); iframe.style.display="none"; iframe.src=" document.body.appendchild(iframe); } Redirect to Java exploit
19 Demo
20 So what should we do about this? Never go to Internet 100% secure Use ad blocking tools not everything can be blocked though Block advertiser s URLs including Yahoo and Google? Main problem is still drive-by-download
21 Conclusion Online ads are an integral part of web economy, these aren t going anywhere Black market goals: max(profit) & min(effort) Drive-by-download attacks can now reach all of us Responsibility needs to be shared: Ad publishers and security providers
22 Some References N. Provos et al The ghost in the browser: analysis of web-based malware in Proceedings of HotBots 07, 2007, available at last accessed on June 6, 2014 S. Ford Analyzing and Detecting Malicious Flash Advertisements in Proceedings of ACSAC 09, 2009, pp , available at Angelia, D. Pishva Online advertising and its security and privacy concerns in Proceedings of ICACT 13, 2013, pp , available at M. Navaraj The Wild Wild Web: YouTube ads serving malware available at /02/21/the-wild-wild-web-youtube-ads-serving-malware/ V. Kotov, F. Massacci Anatomy of Exploit Kits in Proceedings of ESSoS 13, available at securitylab.disi.unitn.it/lib/exe/fetch.php?media=kotov_massacci_anatomy_of_exploit_kits_wp.pdf Running in the wild, not for so long, available at
23
Optimized Mal-Ops. Hack the ads network like a boss. Vadim Kotov Security Researcher vadim.kotov@bromium.com
Optimized Mal-Ops Hack the ads network like a boss Vadim Kotov Security Researcher vadim.kotov@bromium.com 1 Abstract In this research we perform an in-depth analysis of malicious web ads with the focus
RIA SECURITY TECHNOLOGY
RIA SECURITY TECHNOLOGY Ulysses Wang Security Researcher, Websense Hermes Li Security Researcher, Websense 2009 Websense, Inc. All rights reserved. Agenda RIA Introduction Flash Security Attack Vectors
Sandy. The Malicious Exploit Analysis. http://exploit-analysis.com/ Static Analysis and Dynamic exploit analysis. Garage4Hackers
Sandy The Malicious Exploit Analysis. http://exploit-analysis.com/ Static Analysis and Dynamic exploit analysis About Me! I work as a Researcher for a Global Threat Research firm.! Spoke at the few security
Shane Hartman CISSP, GCIA, GREM Suncoast Security Society
Shane Hartman CISSP, GCIA, GREM Suncoast Security Society Analyzing Malware Why Flash Malware Structure of an SWF File History of Flash Scripting Exploit Example 1: Social Engineering Exploit Example 2:
Real World and Vulnerability Protection, Performance and Remediation Report
Real World and Vulnerability Protection, Performance and Remediation Report A test commissioned by Symantec Corporation and performed by AV-Test GmbH Date of the report: September 17 th, 2014, last update:
Malware B-Z: Inside the Threat From Blackhole to ZeroAccess
Malware B-Z: Inside the Threat From Blackhole to ZeroAccess By Richard Wang, Manager, SophosLabs U.S. Over the last few years the volume of malware has grown dramatically, thanks mostly to automation and
LASTLINE WHITEPAPER. Large-Scale Detection of Malicious Web Pages
LASTLINE WHITEPAPER Large-Scale Detection of Malicious Web Pages Abstract Malicious web pages that host drive-by-download exploits have become a popular means for compromising hosts on the Internet and,
Web Application Worms & Browser Insecurity
Web Application Worms & Browser Insecurity Mike Shema Welcome Background Hacking Exposed: Web Applications The Anti-Hacker Toolkit Hack Notes: Web Security Currently working at Qualys
white paper Malware Security and the Bottom Line
Malware Security Report: Protecting Your BusineSS, Customers, and the Bottom Line Contents 1 Malware is crawling onto web sites everywhere 1 What is Malware? 2 The anatomy of Malware attacks 3 The Malware
HACKER INTELLIGENCE INITIATIVE. The Secret Behind CryptoWall s Success
HACKER INTELLIGENCE INITIATIVE The Secret Behind 1 1. Introduction The Imperva Application Defense Center (ADC) is a premier research organization for security analysis, vulnerability discovery, and compliance
The Top Web Application Attacks: Are you vulnerable?
QM07 The Top Web Application Attacks: Are you vulnerable? John Burroughs, CISSP Sr Security Architect, Watchfire Solutions jburroughs@uk.ibm.com Agenda Current State of Web Application Security Understanding
Analyzing and Detecting Malicious Flash Advertisements
Analyzing and Detecting Malicious Flash Advertisements Sean Ford, Marco Cova, Christopher Kruegel, and Giovanni Vigna Department of Computer Science University of California, Santa Barbara Santa Barbara,
Penetration Test JSPLC. Contact: James, APS (CCNA, CEH) contactep105t@secure- mail.biz
Contact: James, APS (CCNA, CEH) contactep105t@secure- mail.biz Ok, so this isn t the typical way that a pen test report would start, but we might as well get straight in to it. I am a customer of Sainsbury
Hacking Intranet Websites from the Outside (Take 2) Fun With & Without JavaScript Malware
Hacking Intranet Websites from the Outside (Take 2) Fun With & Without JavaScript Malware July 2007 Jeremiah Grossman Founder and CTO, WhiteHat Security A WhiteHat Security Whitepaper 3003 Bunker Hill
Exploring the Black Hole Exploit Kit
Exploring the Black Hole Exploit Kit Updated December 20, 2011 Internet Identity Threat Intelligence Department http://www.internetidentity.com http://www.internetidentity.com 12/29/11 Page 1/20 Summary
Advancements in Botnet Attacks and Malware Distribution
Advancements in Botnet Attacks and Malware Distribution HOPE Conference, New York, July 2012 Aditya K Sood Rohit Bansal Richard J Enbody SecNiche Security Department of Computer Science and Engineering
EyjafjallajöKull Framework (aka: Exploit Kits Krawler Framework)
EyjafjallajöKull Framework (aka: Exploit Kits Krawler Framework) Seeking Exploit Kits at Large Scale Made Easy By Sébastien Larinier / @Sebdraven & Guillaume Arcas / @y0m This Slide Intentionally Left
Behavioral Advertising
Behavioral Advertising 1 Introduction... 3 1.1 Intended Audience... 3 1.2 Additional Resources... 3 2 Behavioral Advertising... 4 2.1 Dynamic Ads for Display Advertising... 4 2.1.1 Terminology... 4 2.1.2
Malicious Network Traffic Analysis
Malicious Network Traffic Analysis Uncover system intrusions by identifying malicious network activity. There are a tremendous amount of network based attacks to be aware of on the internet today and the
Can Consumer AV Products Protect Against Critical Microsoft Vulnerabilities?
ANALYST BRIEF Can Consumer AV Products Protect Against Critical Microsoft Vulnerabilities? Author Randy Abrams Tested Products Avast Internet Security 7 AVG Internet Security 2012 Avira Internet Security
WEB ATTACKS AND COUNTERMEASURES
WEB ATTACKS AND COUNTERMEASURES February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in
The Prevalence of Flash Vulnerabilities on the Web
TECHNICAL BRIEF FLASH FLOODING The Prevalence of Flash Vulnerabilities on the Web Adobe Flash Player is a cross-platform, browser plugin that provides uncompromised viewing of expressive applications,
Introduction The Case Study Technical Background The Underground Economy The Economic Model Discussion
Internet Security Seminar 2013 Introduction The Case Study Technical Background The Underground Economy The Economic Model Discussion An overview of the paper In-depth analysis of fake Antivirus companies
SOCIAL NETWORKS AND INFECTION MODEL
Feature Chain Exploitation Social Networks Malware Aditya K. Sood has more than five years of experience in computer security and has worked in the security domain for Armorize, COSEINC and KPMG. He is
New Tool for Discovering Flash Player 0-day Attacks in the. Wild from Various Channels
New Tool for Discovering Flash Player 0-day Attacks in the Wild from Various Channels @heisecode 1, Background In 2014, Microsoft introduced isolated heap and memory protector to avoid IE UAF exploits,
Melde- und Analysestelle Informationssicherung MELANI Torpig/Mebroot Reverse Code Engineering (RCE)
Melde- und Analysestelle Informationssicherung MELANI Torpig/Mebroot Reverse Code Engineering (RCE) Andreas Greulich, MELANI Swiss Cyber Storm, 18 April 2009 Agenda Part 1: Introduction (~5 ) Infection
Context Threat Intelligence
Context Threat Intelligence Threat Advisory The Monju Incident Context Ref. Author TA10009 Context Threat Intelligence (CTI) Date 27/01/2014 Tel +44 (0) 20 7537 7515 Fax +44 (0) 20 7537 1071 Email threat@contextis.co.uk
NUIT Tech Talk. Peeking Behind the Curtain of Security. Jeff Holland Security Vulnerability Analyst Information & Systems Security/Compliance
NUIT Tech Talk Peeking Behind the Curtain of Security Jeff Holland Security Vulnerability Analyst Information & Systems Security/Compliance Definitions Malware: The Virus/Trojan software we ve all come
Malicious Websites uncover vulnerabilities (browser, plugins, webapp, server), initiate attack steal sensitive information, install malware, compromise victim s machine Malicious Websites uncover vulnerabilities
Dr. Seltsam, oder wie ich lernte, Malware zu lieben
Dr. Seltsam, oder wie ich lernte, Malware zu lieben Matthias Schmidt schmidt@ieee.org Quid est Malware? 2 Viruses Spyware Worms Adware Malware Rootkits Trojans Keyloggers Ransomware Dialers 06/05/13 3
Caribbean Tourism Organization Website Advertising Policy for OneCaribbean.org
Caribbean Tourism Organization Website Advertising Policy for OneCaribbean.org The Caribbean Tourism Organization is now offering the opportunity to advertise on its membership website, at http://www.onecaribbean.org.
HEIX 701: Research Project
HEIX 701: Research Project Web-Browsers In Health Informatics Applications A Review Of The Most Prevalent Web- Browsers, Their Functionalities & Limitations In Health IT Systems Author: Dr Cameron Cole
Caribbean Tourism Organization Website Advertising Policy for OneCaribbean.org
Caribbean Tourism Organization Website Advertising Policy for OneCaribbean.org The Caribbean Tourism Organization is now offering the opportunity to advertise on its membership website, at http://www.onecaribbean.org.
Bank Hacking Live! Ofer Maor CTO, Hacktics Ltd. ATC-4, 12 Jun 2006, 4:30PM
Bank Hacking Live! Ofer Maor CTO, Hacktics Ltd. ATC-4, 12 Jun 2006, 4:30PM Agenda Introduction to Application Hacking Demonstration of Attack Tool Common Web Application Attacks Live Bank Hacking Demonstration
Videoplaza Creative Specification 12 th of March 2012
Creative Asset Specification Videoplaza Table of contents 1 Introduction 3 2 The Videoplaza Format Family 4 2.1 VP Standard Formats... 4 2.2 VP Premium... 4 2.3 Format partners... 4 2.4 VP Custom formats...
What Do You Mean My Cloud Data Isn t Secure?
Kaseya White Paper What Do You Mean My Cloud Data Isn t Secure? Understanding Your Level of Data Protection www.kaseya.com As today s businesses transition more critical applications to the cloud, there
Te Whare Wananga o te Upoko o te Ika a Maui. Computer Science
VICTORIA UNIVERSITY ÎÍÏ OF WELLINGTON Te Whare Wananga o te Upoko o te Ika a Maui School of Mathematical and Computing Sciences Computer Science PO Box 600 Wellington New Zealand Tel: +64 4 463 5341, Fax:
State of the Web 2015: Vulnerability Report. March 2015. 2015 Menlo Security Alright Reserved
State of the Web 2015: Vulnerability Report March 2015 Motivation In February 2015, security researchers http://www.isightpartners.com/2015/02/codoso/ reported that Forbes.com had been hacked. The duration
Cyber Security Presentation Cyber Security Month Curtis McNay, Director of IT Security
Cyber Security Presentation Cyber Security Month Curtis McNay, Director of IT Security The IT Security Office (ITSO) What We Do? Risk Assessment Network and System Security Monitoring Vulnerability Scanning
Detecting and Defending Against Security Vulnerabilities for Web 2.0 Applications
Detecting and Defending Against Security Vulnerabilities for Web 2.0 Applications Ray Lai, Intuit TS-5358 Share experience how to detect and defend security vulnerabilities in Web 2.0 applications using
Check Point: Sandblast Zero-Day protection
Check Point: Sandblast Zero-Day protection Federico Orlandi Itway Support Engineer 2015 Check Point Software Technologies Ltd. 1 Check Point Threat Prevention SandBlast IPS Antivirus SandBlast stops zero-day
The Sandbox Roulette: are you ready to gamble? Rafal Wojtczuk rafal@bromium.com Rahul Kashyap rahul@bromium.com
The Sandbox Roulette: are you ready to gamble? Rafal Wojtczuk rafal@bromium.com Rahul Kashyap rahul@bromium.com What is a sandbox? Environment designed to run untrusted (or exploitable) code, in a manner
Display Ad Unit Guidelines
Display Ad Unit Guidelines Page 1 Page 4 Page 5 Pages 6-7 SuperStore Sale superstore.com Save 25% on your entire purchase this weekend only! Universal Ad Package including Standard & Rich Media BORDERS
Using big data analytics to identify malicious content: a case study on spam emails
Using big data analytics to identify malicious content: a case study on spam emails Mamoun Alazab & Roderic Broadhurst Mamoun.alazab@anu.edu.au http://cybercrime.anu.edu.au 2 Outline Background Cybercrime
Botnets Die Hard Owned and Operated
Botnets Die Hard Owned and Operated,,, Las Vegas, 2012 Aditya K Sood Richard J Enbody SecNiche Security Department of Computer Science and Engineering Michigan State University Aditya K Sood About Us PhD
Zero Day Malware Threat Prevention
Zero Day Malware Threat Prevention Ensuring Document Safety with Outside In Clean Content ORACLE BRIEF JULY 2015 This brief describes how Oracle Outside In Clean Content can be used to remove and neutralize
Security Intelligence Services. Cybersecurity training. www.kaspersky.com
Kaspersky Security Intelligence Services. Cybersecurity training www.kaspersky.com CYBERSECURITY TRAINING Leverage Kaspersky Lab s cybersecurity knowledge, experience and intelligence through these innovative
WHY DOES MY SPEED MONITORING GRAPH SHOW -1 IN THE TOOLTIP? 2 HOW CAN I CHANGE MY PREFERENCES FOR UPTIME AND SPEED MONITORING 2
FAQ WHY DOES MY SPEED MONITORING GRAPH SHOW -1 IN THE TOOLTIP? 2 HOW CAN I CHANGE MY PREFERENCES FOR UPTIME AND SPEED MONITORING 2 WHAT IS UPTIME AND SPEED MONITORING 2 WHEN I TRY TO SELECT A SERVICE FROM
Description: Course Details:
Course: Malicious Network Traffic Analysis Duration: 5 Day Hands-On Lab & Lecture Course Price: $ 3,495.00 Description: There are a tremendous amount of network based attacks to be aware of on the internet
Protect Your IT Infrastructure from Zero-Day Attacks and New Vulnerabilities
Protect Your IT Infrastructure from Zero-Day Attacks and New Vulnerabilities Protecting a business s IT infrastructure is complex. Take, for example, a retailer operating a standard multi-tier infrastructure
Client Side Cross Site Scripting
Client Side Cross Site Scripting 1 Client Side Cross Site Scripting CLIENT SIDE XSS - DI PAOLA 2 Soluzioni e sicurezza per applicazioni mobile e payments Consorzio Triveneto, azienda leader nei sistemi
Smart Versioning Creative Best Practices
Smart Versioning Creative Best Practices What is Smart Versioning? The collection of features inside the MediaMind Platform that allow users to: Ø Create target audiences, based on a geography or behavioral
QUARTERLY REPORT 2015 INFOBLOX DNS THREAT INDEX POWERED BY
QUARTERLY REPORT 2015 INFOBLOX DNS THREAT INDEX POWERED BY EXPLOIT KITS UP 75 PERCENT The Infoblox DNS Threat Index, powered by IID, stood at 122 in the third quarter of 2015, with exploit kits up 75 percent
A more comprehensive version of this material was published in the October issue of the Virus Bulletin magazine [3].
![A more comprehensive version of this material was published in the October issue of the Virus Bulletin magazine [3].](/thumbs/19/275461.jpg "A more comprehensive version of this material was published in the October issue of the Virus Bulletin magazine [3].")
INSIDE A BLACK HOLE By Gabor Szappanos, Principal Researcher, SophosLabs Introduction Without exception the most actively deployed exploit kit in the past year was the Blackhole exploit kit. [1]. Now that
Adobe Flash Player and Adobe AIR security
Adobe Flash Player and Adobe AIR security Both Adobe Flash Platform runtimes Flash Player and AIR include built-in security and privacy features to provide strong protection for your data and privacy,
2015 TRUSTWAVE GLOBAL SECURITY REPORT
2015 TRUSTWAVE GLOBAL SECURITY REPORT Rahul Samant Trustwave Australia WHY DO CYBERCRIMINALS DO WHAT THEY DO? 1,425% Return on Investment (ROI) Estimated ROI for a one-month ransomware campaign Based on
Criteria for web application security check. Version 2015.1
Criteria for web application security check Version 2015.1 i Content Introduction... iii ISC- P- 001 ISC- P- 001.1 ISC- P- 001.2 ISC- P- 001.3 ISC- P- 001.4 ISC- P- 001.5 ISC- P- 001.6 ISC- P- 001.7 ISC-
Inspection of Encrypted HTTPS Traffic
Technical Note Inspection of Encrypted HTTPS Traffic StoneGate version 5.0 SSL/TLS Inspection T e c h n i c a l N o t e I n s p e c t i o n o f E n c r y p t e d H T T P S T r a f f i c 1 Table of Contents
The Fundamental Failures of End-Point Security. Stefan Frei Research Analyst Director sfrei@secunia.com
The Fundamental Failures of End-Point Security Stefan Frei Research Analyst Director sfrei@secunia.com Agenda The Changing Threat Environment Malware Tools & Services Why Cybercriminals Need No 0-Days
Sizmek Features. Wallpaper. Build Guide
Features Wallpaper Build Guide Table Of Contents Overview... 3 Known Limitations... 4 Using the Wallpaper Tool... 4 Before you Begin... 4 Creating Background Transforms... 5 Creating Flash Gutters... 7
Pwning Intranets with HTML5
Javier Marcos de Prado Juan Galiana Lara Pwning Intranets with HTML5 2009 IBM Corporation Agenda How our attack works? How we discover what is in your network? What does your infrastructure tell us for
Phishing by data URI
Phishing by data URI Henning Klevjer henning@klevjers.com October 22, 2012 1 Abstract Historically, phishing web pages have been hosted by web servers that are either compromised or owned by the attacker.
Seminar: Cryptographic Protocols Staged Information Flow for JavaScript
Seminar: Cryptographic Protocols Staged Information Flow for JavaScript Sebastian Wild 1 Introduction JavaScript is an important component of modern web applications since it is possible to execute code
Online Advertising Specifications
Online Advertising Specifications Website Banner Ads pg. 2-3 Here you will discover the different banner ads that are available through ArtsAndCraftsHomes.com. There will be visual examples along with
Rational AppScan & Ounce Products
IBM Software Group Rational AppScan & Ounce Products Presenters Tony Sisson and Frank Sassano 2007 IBM Corporation IBM Software Group The Alarming Truth CheckFree warns 5 million customers after hack http://infosecurity.us/?p=5168
Cracking the Perimeter via Web Application Hacking. Zach Grace, CISSP, CEH zgrace@403labs.com January 17, 2014 2014 Mega Conference
Cracking the Perimeter via Web Application Hacking Zach Grace, CISSP, CEH zgrace@403labs.com January 17, 2014 2014 Mega Conference About 403 Labs 403 Labs is a full-service information security and compliance
Cross-Site Scripting
Cross-Site Scripting (XSS) Computer and Network Security Seminar Fabrice Bodmer (fabrice.bodmer@unifr.ch) UNIFR - Winter Semester 2006-2007 XSS: Table of contents What is Cross-Site Scripting (XSS)? Some
The Microsoft JPEG Vulnerability and the Six New Content Security Requirements
The Microsoft JPEG Vulnerability and the Six New Content Security Requirements Table of Contents OVERVIEW...3 1. THE VULNERABILITY DESCRIPTION...3 2. NEEDED: A NEW PARADIGM IN CONTENT SECURITY...4 3. PRACTICAL
Public-Facing Websites: A Loaded Gun Pointing at Customers, Partners and Employees
Public-Facing Websites: A Loaded Gun Pointing at Customers, Partners and Employees The Importance of Incorporating Digital Property Security Into Your IT Strategy Public-Facing Websites: A Loaded Gun Pointing
DNS POISONING, AKA PHARMING, MAKES THE HEADLINES IN NOVEMBER S NEWS
DNS POISONING, AKA PHARMING, MAKES THE HEADLINES IN NOVEMBER S NEWS December 2011 November saw DNS Poisoning, aka Pharming, making the headlines on more than one occasion: To name a few, the online threat
CS 558 Internet Systems and Technologies
CS 558 Internet Systems and Technologies Dimitris Deyannis deyannis@csd.uoc.gr 881 Heat seeking Honeypots: Design and Experience Abstract Compromised Web servers are used to perform many malicious activities.
Practical Threat Intelligence. with Bromium LAVA
Practical Threat Intelligence with Bromium LAVA Practical Threat Intelligence Executive Summary Threat intelligence today is costly and time consuming and does not always result in a reduction of successful
Fighting Advanced Threats
Fighting Advanced Threats With FortiOS 5 Introduction In recent years, cybercriminals have repeatedly demonstrated the ability to circumvent network security and cause significant damages to enterprises.
Web Application Security
Web Application Security Ng Wee Kai Senior Security Consultant PulseSecure Pte Ltd About PulseSecure IT Security Consulting Company Part of Consortium in IDA (T) 606 Term Tender Cover most of the IT Security
Online Advertising Media Kit
Online Advertising Media Kit MyNorthwest.com is a top regional website delivering news, weather, traffic, sports and lifestyle content. Award-winning personalities at three powerful news/talk/sports radio
GOING BEYOND BLOCKING AN ATTACK
Websense Executive Summary GOING BEYOND BLOCKING AN ATTACK WEBSENSE TRITON VERSION 7.7 Introduction We recently announced several new advanced malware and data theft protection capabilities in version
Detecting the One Percent: Advanced Targeted Malware Detection
Detecting the One Percent: Advanced Targeted Malware Detection Tomer Teller Check Point Software Technologies Session ID: SP02-T19 Session Classification: Intermediate Antivirus 20 th+ Anniversary The
MALWARE ANALYSIS 1. STYX EXPLOIT PACK: INSIDIOUS DESIGN Aditya K. Sood & Richard J. Enbody Michigan State University, USA COMMUNICATION DESIGN
MALWARE ANALYSIS 1 STYX EXPLOIT PACK: INSIDIOUS DESIGN Aditya K. Sood & Richard J. Enbody Michigan State University, USA Rohit Bansal Independent Security Researcher, India In this paper, we discuss the
DO YOU USE FIREWALLS?
DO YOU USE FIREWALLS? Great! So do we. And nonetheless, websites get hacked, manipulated and messed up. Even if you protect yourself, you can very quickly become a victim of an attack. You probably know
N J C C I C NJ CYBERSECURITY AND COMMUNICATIONS INTEGRATION CELL
4 N J C C I C NJ CYBERSECURITY AND COMMUNICATIONS INTEGRATION CELL Exploit Kits: A Prevailing Vector for Malware Distribution August 5, 2015 Since first appearing around 2006, exploit kits (EK) have evolved
Networks and Security Lab. Network Forensics
Networks and Security Lab Network Forensics Network Forensics - continued We start off from the previous week s exercises and analyze each trace file in detail. Tools needed: Wireshark and your favorite
The evolvement of the Threat Landscape. Viktor Ziegler, Account Manager Germany & Eastern Europe March 2014
Security Reimagined The evolvement of the Threat Landscape Viktor Ziegler, Account Manager Germany & Eastern Europe March 2014 Mobile Cloud Social Big Data Current Threat Landscape Innovation Creates
Security A to Z the most important terms
Security A to Z the most important terms Part 1: A to D UNDERSTAND THE OFFICIAL TERMINOLOGY. This is F-Secure Labs. Learn more about the most important security terms with our official explanations from
HackAlert Malware Monitoring
HackAlert Malware Monitoring Understanding the reselling opportunity for Online Security Services GlobalSign. A GMO Internet Inc group company. Reselling Malware Monitoring The GlobalSign Partner Program
Recommended Practice Case Study: Cross-Site Scripting. February 2007
Recommended Practice Case Study: Cross-Site Scripting February 2007 iii ACKNOWLEDGEMENT This document was developed for the U.S. Department of Homeland Security to provide guidance for control system cyber
Blackhole Exploit Kit: A Spam Campaign, Not a Series of Individual Spam Runs AN IN-DEPTH ANALYSIS
Trend Micro Incorporated Research Paper 2012 Blackhole Exploit Kit: A Spam Campaign, Not a Series of Individual Spam Runs AN IN-DEPTH ANALYSIS By: Jon Oliver, Sandra Cheng, Lala Manly, Joey Zhu, Roland
SOFTWARE UPDATER A unique tool to protect your business against known threats
SOFTWARE UPDATER A unique tool to protect your business against known threats OVERVIEW This document explains the functionality of Software Updater. What it is, what it does, how it works, what gets patched
Finding and Preventing Cross- Site Request Forgery. Tom Gallagher Security Test Lead, Microsoft
Finding and Preventing Cross- Site Request Forgery Tom Gallagher Security Test Lead, Microsoft Agenda Quick reminder of how HTML forms work How cross-site request forgery (CSRF) attack works Obstacles
[state of the internet] / SEO Attacks. Threat Advisory: Continuous Uptick in SEO Attacks
![[state of the internet] / SEO Attacks. Threat Advisory: Continuous Uptick in SEO Attacks](/thumbs/36/17600806.jpg "[state of the internet] / SEO Attacks. Threat Advisory: Continuous Uptick in SEO Attacks")
TLP: GREEN Issue Date: 1.12.16 Threat Advisory: Continuous Uptick in SEO Attacks Risk Factor High The Akamai Threat Research Team has identified a highly sophisticated Search Engine Optimization (SEO)
SPYWARE & MALWARE. ComputerFixed.co.uk Page: 1 Email: info@computerfixed.co.uk. How do you get infected? Will Anti-virus software protect me?
ComputerFixed.co.uk Page: 1 Email: info@computerfixed.co.uk SPYWARE & MALWARE How do you get infected? You can get infected by malware (malicious Software) in several ways. Malware often comes bundled
Modern Cyber Threats. how yesterday s mind set gets in the way of securing tomorrow s critical infrastructure. Axel Wirth
Modern Cyber Threats how yesterday s mind set gets in the way of securing tomorrow s critical infrastructure Axel Wirth Healthcare Solutions Architect Distinguished Systems Engineer AAMI 2013 Conference
Buyers Guide to Web Protection
Buyers Guide to Web Protection The web is the number one source for malware distribution today. While many organizations have replaced first-generation URL filters with secure web gateways, even these
2011-2012. Online Advertising Media Kit. A Final Draft, Inc. Publication. To place your ad, contact: phone: 800-231-4055 x137.
2011-2012 Online Advertising Media Kit rev.101213 A Final Draft, Inc. Publication Paige Gordon phone: 800-231-4055 x137 fax: 818-995-4422 e-mail: adsales@finaldraft.com Scriptwriters Are Online! Over 28,000
How To Get Rid Of A Phish Locker On A Computer (For A Bank)
PHISH LOCKERS OUT IN THE WILD August 2013 RSA researchers have been increasingly witnessing the activity of highly targeted Trojans, dubbed Phish Lockers, used at the hands of cybercriminals to steal credentials.
Malware. Björn Victor 1 Feb 2013. [Based on Stallings&Brown]
![Malware. Björn Victor 1 Feb 2013. [Based on Stallings&Brown]](/thumbs/40/20589514.jpg "Malware. Björn Victor 1 Feb 2013. [Based on Stallings&Brown]")
Malware Björn Victor 1 Feb 2013 Ask Sofia if anything is unclear/too difficult with the lab. Coordinate meetings between you? BadStore: demo version New York Times, Wall Street Journal attacks from China,
Security Certification of Third- Parties Applications
Security Certification of Third- Parties Applications Stanislav Dashevskyi dashevskyi@fbk.eu Advisors: Fabio Massacci, Antonino Sabetta Agenda Introduction Third-party code in web applications Third-party
Introduction to BlackBerry Smartphone Web Development Widgets
Introduction to BlackBerry Smartphone Web Development Widgets Trainer name Date 2009 Research In Motion Limited V1.00 are stand-alone BlackBerry applications that consist of standard web components, including
Securing the endpoint and your data
#SymVisionEmea #SymVisionEmea Securing the endpoint and your data Piero DePaoli Sr. Director, Product Marketing Marcus Brownell Sr. Regional Product Manager Securing the Endpoint and Your Data 2 Safe harbor
Secure Your Mobile Workplace
Secure Your Mobile Workplace Sunny Leung Senior System Engineer Symantec 3th Dec, 2013 1 Agenda 1. The Threats 2. The Protection 3. Q&A 2 The Mobile Workplaces The Threats 4 Targeted Attacks up 42% in
Worry-free website hosting... because your choice in hosting does matter!
Worry-free website hosting... because your choice in hosting does matter! WHAT ARE WEBSITE HOSTING SERVICES? A critical step in the website development process is the selection of a website hosting service