Upload File

attackers, attacks and security strategies · credentials. 11. 12. 13 •new breed of highly...

  • Home
  • Documents
  • Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly
22
1 Cybersecurity 2020 Attackers, Attacks and Security Strategies

Upload: others

Post on 21-Jul-2020

2 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

1

Cybersecurity 2020Attackers, Attacks and Security Strategies

Page 2: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

2

Cybersecurity Challenge

Open and Accessible

IoT Adoption

Budget

ConstraintsExpertise

Page 3: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

3

Attack Process

Identification Enumeration Arm UpInitial

ContactCompromise Persistence

Lateral Movement

Exfiltration/ Exploitation

Reuse / Resell / Recycle

Page 4: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

4

People Centric Targets

Page 5: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

5

Device Centric Targets

Page 6: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

6

ncreased sophistication and targeted.

• Successful attacks often lead to password compromise, malware infection, corporate/personal data loss and financial fraud.

Page 7: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

7

Page 8: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

8

Page 9: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

Getting to Know You!

Page 10: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

10

Get your Credentials

Hack You

Hack a Site

Buy Them.

Re-engineer your credentials

01 – 02

Password –Pa55W0rD

Facebook PW with FB

Use your Credentials

Social Media

Email

Banking / Financial

Anything else

Credentials

Page 11: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

11

Page 12: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

12

Page 13: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

13

• New breed of highly persistent and stealthy malware.

• Rise in fileless malware and droppers.

• Using highly sophisticated exploits for delivery. No longer need to be in a nation states crosshair to be impacted by their advance cyber weapons.

• Ransomware still common but also seeing increase in stealthier crypto-mining malware.

• Rise in ease of use and availability of cyber crime platforms, Malware/Ransomware as a Service.

Page 14: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

14

Ransomware

Page 15: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

15

0-Days

Page 16: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

Supply Chain Attacks

Page 17: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

17

Device

Vulnerability

Target On-Site

Remote Access

Firmware

Remote Access

Company

Credential Theft

Firmware Manipulation

Direct Access

IoT Supply Chain Attacks

Page 18: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

18

What Next for Security?

Page 19: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

19

Security As A Process

• Visibility

• Detection

• Control

• Reporting

• Measurement

Page 20: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

20

Hacking 101 –Phishing to Credential Theft

Page 21: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

21

Cybersecurity 2020

Hacking is a process.

Defense should also be a process.

You can be easily targeted.

Network Segmentation is key for IoT.

Passwords are weak use 2FA.

Integrated and automated gives the highest security.

Page 22: Attackers, Attacks and Security Strategies · Credentials. 11. 12. 13 •New breed of highly persistent and stealthy malware. •Rise in fileless malware and droppers. •Using highly

Malspam5 • Droppers are initial malware delivered by spam messages that install, or “drop”, additional malware such as keyloggers or ransomware • Malspam messages may have

Arthur Flury AG - ozenray.com · Crimping sleeve Conical couplings and collar sockets Company presentation Arthur Flury AG 9. 21.07.2016 Dropper clamps Cable droppers Strap droppers

Combatting Point-of-Sale Malware€¦ · Point-of-sale (POS) malware is highly customized malicious software written to identify, aggregate and exfiltrate cardholder data (CHD). According

Shell Trojan Generators / Droppers / Backdoors Notes

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

EUROPEANPHARMACOPOEIA10.0 2.2.66 ......EUROPEANPHARMACOPOEIA10.0 Index 1.Generalnotices 3 2.1.Apparatus 15 2.1.1.Droppers 15

EVENTCORE Lighting Guideeventcore.com.au/.../Eventcore-Lighting-guide-16-1.pdf · Edison droppers Individual Edison droppers. Available in a selection of dropper lengths and can be

Metamorphic Malware 1 Metamorphic Malware Research

Pipe Droppers Specification

7 BEHAVIORS OF HIGHLY EFFECTIVE BDS - CLOUDSEC...7 BEHAVIORS OF HIGHLY EFFECTIVE BDS Tarun Gupta Senior Technical Consultant Trend Micro #CLOUDSEC . ... Money Mule Droppers $1 Card

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

A Quarterly Analysis of Highly Targeted Cyber Attacks · highly targeted malware and phishing attacks, a slight drop vs. the previous quarter. Attacks against upper managers and executives

Windows Malware Firewall: Remove Windows Malware Firewall

Computer Virology and Mobile Malware Detection · 2019-03-14 · Outline •Introduction •Computer Virology • Malware taxonomy • Encrypted malware •Malware Detection •Mobile

An Introduction To Keyloggers, RATS And Malware€¦ · Malware Malware has been a problem for ages, Malware is short form of malicious software. A Malware is basically a program

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Ch 12: Covert Malware Launching - samsclass.info · Practical Malware Analysis Ch 12: Covert Malware Launching Last revised: 4-10-17. Hiding Malware • Malware used to be visible

DMACA Indole Reagent Droppers - BD

Jaw Droppers

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

Limits Assignment Solutions - Droppers

NEET Early Droppers Course - 13th Physics by Muqeem Khan

Dispensing Systems - LUMSON€¦ · Smart Pumps Page 60 Horizon Pumps Page 20 Twist & Click Page 28 Cosmetic Droppers Page 30 Cosmetic Droppers Push Down Button Page 34 Overcaps Page

The Cash Droppers By: Franklin Kotsianas Kenson Therrien Garrett Crawford Allyn Crabtree

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

[CB16] Background Story of "Operation neutralizing banking malware" and highly developed financial malware by Kazuki Takada

Reversing malware analysis trainingpart9 advanced malware analysis

MALWARES MALWARE REVIEWED ISE DE Malware Reviewed · MALWARES There are public reports about spreading of malware named as ServHelper malware. It is a backdoor malware used by attacker

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Intrusion Detection and Malware Analysis - Malware collection

Time Saver Course for NEET for 12th Appearing & Droppers

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

DETECTION AND ISOLATION OF PACKET DROPPERS IN ...llazos/thesis/yu_zhang.pdfDETECTION AND ISOLATION OF PACKET DROPPERS IN WIRELESS AD-HOC NETWORKS by Yu Zhang A Thesis Submitted to

Dell SonicWALL product linesi.dell.com/sites/doccontent/shared-content/data-sheets/en/Document… · highly effective anti-malware, intrusion prevention, content/URL filtering and