O mercado negro dos crimes cibernéticos no Brasil Ronaldo Lima Aline Bueno
Agenda O mercado negro dos crimes cibernéticos no Brasil Cenário O mercado negro brasileiro Como eles trabalham Crimeware Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 2
Alguns números A Febraban estima que fraudes eletrônicas tenham causado prejuízos de cerca de R$1.4 billhão aos bancos em 2012. O número de transações bancárias online (Internet Banking and Mobile Banking) ultrapassou o número de transações feitas em agências bancária. O Brasil já é o segundo maior mercado de cartões de crédito e débito do mundo. Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 3
Crimes cibérnéticos e bancos brasileiros Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 4
O Mercado Negro Brasileiro Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 5
Redes sociais Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 6
Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 7
Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 8
Testador de Cartão de Crédito Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 9
Testador de Cartão de Crédito Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 10
Websites/Blogs Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 11
Websites/Blogs Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 12
Websites/Blogs Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 13
Canais de IRC Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 14
Fórums Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 15
Fórums Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 16
Negociações Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 17
Negociações Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 18
Como eles trabalham Não gostam de pagar por hosting Free, invadido, dropbox, google code, google drive... Pouco uso de servidores dedicados UOL HOST + DB Linguagens: + populares: Delphi, Visual Basic, PHP usos específicos: Applet Java (drive by download), AutoIt (crypters) Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 19
Distribuição de malware Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 20
Ferramentas / Crimeware Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 21
Crypter Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 22
Envio de SPAM Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 23
Envio de SPAM Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 24
Sugador Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 25
Sugador Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 26
Extensão Maliciosa Google Chrome Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 27
Extensão Maliciosa Google Chrome Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 28
Spy Net RAT (Remote Access Tool) Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 29
Spy Net RAT Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 30
Spy Net RAT Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 31
KL Remota Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 32
KL Remota Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 33
KL Remota Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 34
Botnet Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 35
Botnet Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 36
Botnet Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 37
Atendimento ao vivo para os clientes Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 38
Painel de Administração Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 39
Painel de Administração Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 40
Painel de Administração Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 41
Conclusões e Projeções Impunidade = criminosos agem sem medo Uso de ferramentas personalizadas (criatividade) Reuso de código disponível na web Tendências: automatização, profissionalização, mercados estrangeiros Ainda há espaço para o crescimento de Internet Banking... Vamos trocar informações técnicas! Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 42
Obrigado! Ronaldo Lima rplima.br@gmail.com @crimescibernet www.crimesciberneticos.com Aline Bueno alibueno@gmail.com @alibueno Proprietary and Confidential Information. Copyright 2014, isight Partners, Inc. All Rights Reserved www.isightpartners.com 43