Botconf 2016

Vawtrak Banking Trojan : A Threat to the Banking Ecosystem Botconf 2016 Wednesday | 16:00 – 16:50 Victor Acin 🗣 | Raashid Bhat 🗣 Vawtrak has been among the top banking Trojans since quite a long time now. Banking Trojans have not been discussed much in security conferences contrary to APT’s and other type of malwares. This

Snoring Is Optional: The Metrics and Economics of Cyber Insurance for Malware Related Claims Botconf 2016 Wednesday | 16:55 – 17:35 Wayne Crowder 🗣 Insurance addresses the economics of security on the internet. Cyber insurance is sold to companies as a way to offset the risk and costs of a security incident. Governments, large enterprises

Hunting Droids from the Inside Botconf 2016 Wednesday | 17:40 – 18:20 Łukasz Siewierski 🗣 This talk will be a survey of different potentially harmful applications (PHAs), botnets and malware campaigns on Android that we encountered in 2016. I’ll walk through a variety of different malicious apps, explain the malware authors’ objectives and the techniques

Attacking Linux/Moose 2.0 Unraveled an EGO MARKET Botconf 2016 Thursday | 09:45 – 10:35 Masarah Paquet-Clouston 🗣 | Olivier Bilodeau 🗣 Want to give your blog a push or your “gun show” more views? Then why not buy 50,000 fake followers for $1,000! Click farms from down South or botnets such as Game over Zeus will be

Tracking Exploit Kits Botconf 2016 Thursday | 11:00 – 11:50 John Bambenek 🗣 Despite the ever growing number of malware families, botnets and criminal campaigns; there is only a defined few means by which malware can find its victims. This talk will be a deep dive into tracking exploit kits and the infrastructure behind them.

Improve DDoS Botnet Tracking With Honeypots Botconf 2016 Thursday | 11:50 – 12:20 Ya Liu 🗣 | Wenji Qu DDoS botnet tracking can be used to watch botnet assisted attacks in real time together with the details including the botnet families, C&C servers, attack types, and attack parameters. Such information helps us to learn current DDoS attacks

Function Identification and Recovery Signature Tool Botconf 2016 Thursday | 12:20 – 12:50 Angel Villegas 🗣 Reverse Engineering benign or malicious samples can take a considerable amount of time and new samples are created daily. Leveraging disassemblers, like IDA Pro, a reverse engineer can analyze the same routines across several samples over the lifetime of

Advanced Incident Detection and Threat Hunting using Sysmon (and Splunk) Botconf 2016 Thursday | 14:00 – 14:35 Tom Ueltschi 🗣 Enterprises and organizations of all sizes are struggling to prevent and detect all malware attacks and advanced adversary actions inside their networks in a timely manner. Prevention focused technology hasn’t been good enough to prevent