nullcon 2011 - No bullshit on underground crime: traces, trends, attribution, techniques and more
•Transferir como PPT, PDF•
1 gostou•13,258 visualizações
No bullshit on underground crime: traces, trends, attribution, techniques and more by Fyodor Yarochkin
![NO BULLSHIT Underground crime: traces, trends, attribution, and more ,[object Object],http://null.co.in/ http://nullcon.net/](https://image.slidesharecdn.com/nobullshit-110310102659-phpapp01/85/nullcon-2011-no-bullshit-on-underground-crime-traces-trends-attribution-techniques-and-more-1-320.jpg)
![Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://null.co.in/ http://nullcon.net/](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recomendados
Mais conteúdo relacionado
Semelhante a nullcon 2011 - No bullshit on underground crime: traces, trends, attribution, techniques and more
Semelhante a nullcon 2011 - No bullshit on underground crime: traces, trends, attribution, techniques and more (20)
Mais de n|u - The Open Security Community
Mais de n|u - The Open Security Community (20)
Último
Último (20)
nullcon 2011 - No bullshit on underground crime: traces, trends, attribution, techniques and more
- 3. Still .. meet the “authors”.. :) http://null.co.in/ http://nullcon.net/ Started as hobby project We talked about this At c0c0n Here you’ll see Some fresh stuff Why? ... Something we do When we need a Good laugh :)
- 5. But it is not only about money
- 6. Attack attribution http://null.co.in/ http://nullcon.net/
- 10. Brief: Data sources and Tools (covered in workshop) http://null.co.in/ http://nullcon.net/
- 14. Ex.: What does this say? http://null.co.in/ http://nullcon.net/
- 18. So, russian underground - mafia or geeks? :) http://null.co.in/ http://nullcon.net/
- 20. -malware - http://null.co.in/ http://nullcon.net/ Stuff that lives in your PC Against your will :)
- 22. Looks familiar? http://null.co.in/ http://nullcon.net/
- 23. Моscow arest (31/08/2010) http://null.co.in/ http://nullcon.net/ Annual income: over 500,000 rubles (100,000USD) One unlock charged at 300 rubles (10USD) Via SMS
- 24. Scale: big http://null.co.in/ http://nullcon.net/
- 25. “export” through legitimate sites http://null.co.in/ http://nullcon.net/
- 26. Which end up in Google blacklist Google blacklist http://null.co.in/ http://nullcon.net/
- 28. But there’s much more.. http://null.co.in/ http://nullcon.net/ malware OTHER COOL STUFF :-)
- 29. That’s not a russian hax0r http://null.co.in/ http://nullcon.net/
- 30. This is closer.. http://null.co.in/ http://nullcon.net/
- 36. More payment systems http://null.co.in/ http://nullcon.net/
- 37. Exchange points http://null.co.in/ http://nullcon.net/
- 38. Trading rules http://null.co.in/ http://nullcon.net/ Guarantee service
- 39. Service verification http://null.co.in/ http://nullcon.net/
- 41. White lists http://null.co.in/ http://nullcon.net/
- 42. Credit cards http://null.co.in/ http://nullcon.net/ Very accessible
- 43. CC deals made easy http://null.co.in/ http://nullcon.net/
- 44. Cards, burners http://null.co.in/ http://nullcon.net/
- 45. And more http://null.co.in/ http://nullcon.net/
- 46. Bad $$ => good $$ :P http://null.co.in/ http://nullcon.net/
- 47. Other Online goods Online goods http://null.co.in/ http://nullcon.net/
- 48. Professional mass infection infection http://null.co.in/ http://nullcon.net/ <--Pricing (per 1000 installs) <--Pricing (per 1000 installs)
- 49. ICQ - elite nums :p http://null.co.in/ http://nullcon.net/
- 50. Mail cracking -:) http://null.co.in/ http://nullcon.net/ ~65USD Price in rubles
- 51. Looks familiar? http://null.co.in/ http://nullcon.net/
- 52. Passport scans http://null.co.in/ http://nullcon.net/ 4-5USD/scan avg .eu, .ru, .us, asian One-hand sales Also offered - scan “redraw” Special prices for bulk
- 53. Full package is also available http://null.co.in/ http://nullcon.net/
- 54. “Business package” Pa Includes.. Includes.. http://null.co.in/ http://nullcon.net/ Под средства любой загрязненности! For money of any state of dirtiness В комплект входит: Pack includes 1.Банковский акк(online доступ) Online bank account access 2.АТМ картa(Дневной лимит на снятие средств 1000$/6000$ В МЕСЯЦ-Возможно увеличение лимита +30$-) ATM card (1000/6000USD per month withdrawal limit) 3.Карта кодов (для online доступа) online access passwords 4 .Копия паспорта дропа Passport copy of “poor john” 5.Sim-ka SIM card Also can be pre-ordered on custom passport scan (25USD)
- 55. Drop: http://null.co.in/ http://nullcon.net/ Another way to turn dirty cash into profit
- 56. Saw the news? :) http://null.co.in/ http://nullcon.net/
- 57. Zeus witchunt :) http://null.co.in/ http://nullcon.net/ Not sure if this would change things :)
- 58. New bots - custom made http://null.co.in/ http://nullcon.net/ http://www.nomina.ru/search/alternatives_by_value.php?paid_till=2010-09-06&domain=rundll32.ru
- 59. Or pre-built http://null.co.in/ http://nullcon.net/ Why “zeus” when you can buy this?! :p
- 60. Comes with handy Admin panel Admin panel http://null.co.in/ http://nullcon.net/
- 61. Traf + loader = $$$$ http://null.co.in/ http://nullcon.net/
- 63. Mass domain theft theft http://null.co.in/ http://nullcon.net/
- 64. DDOS Very affordable Very affordable http://null.co.in/ http://nullcon.net/ We remove sites of your concurrents with DDOS attack. Fast and effective. Supported: Prices (in WMZ ~= USD) Discounts for bulk
- 65. Abuse resistant hosting http://null.co.in/ http://nullcon.net/
- 66. Malware A/V QA http://null.co.in/ http://nullcon.net/
- 67. Hash cracking In cloud In cloud http://null.co.in/ http://nullcon.net/
- 68. Captcha In cloud In cloud http://null.co.in/ http://nullcon.net/
- 69. Exploit packs http://null.co.in/ http://nullcon.net/
- 70. With nice stats http://null.co.in/ http://nullcon.net/
- 71. Stats per country http://null.co.in/ http://nullcon.net/ Clicks, loads (pwned ;), percentage)
- 72. Need to build Botnet? http://null.co.in/ http://nullcon.net/
- 73. Welcome TDS system TDS system http://null.co.in/ http://nullcon.net/
- 77. “Game” rules :) http://null.co.in/ http://nullcon.net/ Iframe traff. 4USD/1000 clicks No bot traf (ruclicks) Payday - every monday
- 78. Making money together http://null.co.in/ http://nullcon.net/ Fake AV affiliation program
- 79. Fake AV payouts http://null.co.in/ http://nullcon.net/ Balance Login
- 80. Crimeware: trends And research And research http://null.co.in/ http://nullcon.net/
- 82. Brief on antiy rep http://null.co.in/ http://nullcon.net/
- 83. Spreading vector http://null.co.in/ http://nullcon.net/
- 84. Mobile Malware http://null.co.in/ http://nullcon.net/
- 86. Taking a glance http://null.co.in/ http://nullcon.net/
- 87. The trick! http://null.co.in/ http://nullcon.net/ Press the button “stop” as soon as possible!
- 88. SEO spam http://null.co.in/ http://nullcon.net/ <*bad* word (rus)
- 89. Now - delivered professionally :) http://null.co.in/ http://nullcon.net/
- 92. Anti-DDOS el russo http://null.co.in/ http://nullcon.net/
- 95. Botnet cost estimation :) http://null.co.in/ http://nullcon.net/
- 98. So what’s up with russian authorities?! ：） http://null.co.in/ http://nullcon.net/
- 99. No words ;-) http://null.co.in/ http://nullcon.net/
- 100. What’s next? http://null.co.in/ http://nullcon.net/
- 101. Get some edukation :-) http://null.co.in/ http://nullcon.net/