Geneva, 9(pm)-10 February 2009 International Telecommunication Union Fighting cybercrime in 2009 Magnus Kalkuhl, Senior Virus Analyst Kaspersky Lab ITU-T Workshop on “New challenges for Telecommunication Security Standardizations" Geneva, 9(pm)-10 February 2009
19
Embed
International Telecommunication Union Geneva, 9(pm)-10 February 2009 Fighting cybercrime in 2009 Magnus Kalkuhl, Senior Virus Analyst Kaspersky Lab ITU-T.
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Geneva, 9(pm)-10 February 2009
InternationalTelecommunicationUnion
Fighting cybercrime in 2009
Magnus Kalkuhl,Senior Virus Analyst
Kaspersky Lab
ITU-T Workshop on“New challenges for Telecommunication Security
Standardizations"
Geneva, 9(pm)-10 February 2009
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 2
Number of signatures 1998 - 2008
19981999
20002001
20022003
20042005
20062007
2008
0
200000
400000
600000
800000
1000000
1200000
1400000
1600000
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 3
Cybercrime business
Malware is written for one goal:Making money
Cybercrime business is organized, but more as “crime that is organized” rather than “organized crime”
There is no centralized control by a“Dr no” character
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 4
The dirty approach
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 5
The silent approach
After infection a computer is used for...
Sending spam mailsPerforming DDoS attacksFast flux networksProxy computerStealing the owner's credit card data, bank account or “World of Warcraft” password
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 6
Example: Drive by download
Browser
Exploit: Small program that breaks the barriers of a browser (or other program) and executes own code
InternationalTelecommunicationUnion
Several systems available: MPack, Icepack etc.Offered for 500 – 1.000 EUR
Example: Drive by download
InternationalTelecommunicationUnion
Several systems available: MPack, Icepack etc.Offered for 500 – 1.000 EUR
Example: Drive by download
InternationalTelecommunicationUnion
InternationalTelecommunicationUnion
InternationalTelecommunicationUnion
Shadow botnet
Geneva, 9(pm)-10 February 2009InternationalTelecommunicationUnion 12