Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Operazioni mirate e malware di Stato nell'era della guerra cibernetica e del cyber-terrorismo

7,933 views

Published on

L'evoluzione dei Sistemi Informativi Ospedalieri e le Minacce Informatiche 2015

Published in: Technology
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here

Operazioni mirate e malware di Stato nell'era della guerra cibernetica e del cyber-terrorismo

  1. 1. Operazioni mirate e malware di Stato nell'era della guerra cibernetica e del cyber- terrorismo L’evoluzione dei Sistemi Informativi Ospedalieri e le Minacce Informatiche 2015 – ASL Pescara Gianni 'guelfoweb' Amato
  2. 2. Site → www.securityside.it Blog → www.gianniamato.it Email → amato@securityside.it Twitter → @guelfoweb Gianni Amato Independent Security Researcher Ethical Hacking | Cyber Security | Digital Forensics
  3. 3. Chi sono gli attori
  4. 4. Quali armi
  5. 5. Dove procurarsele
  6. 6. In sintesi
  7. 7. Ma c'è anche dell'altro
  8. 8. Chi gestisce i blackmarket?
  9. 9. Chi ne usufruisce?
  10. 10. Quanto costa mettere a segno un attacco?
  11. 11. Dipende dalla tipologia di attacco. - DDoS ≈ 500€ - 0/1day fno a 100.000€→
  12. 12. Chi può essere interessato a sborsare cifre esorbitanti per sferrare un attacco?
  13. 13. Live Attacks | map.ipviking.com
  14. 14. Aprile 2007 – Attacco DDoS isola l'Estonia da Internet. Il governo estone afferma senza mezzi termini di aver individuato l'aggressore: la Russia di Vladimir Putin. La Russia nega! Controversia: aver spostato da Tallin il soldato di bronzo con uniforme dell'armata russa. Attacchi provenienti da IP localizzati in Russia e dai servizi di sicurezza di Mosca.
  15. 15. Giugno 2010 – Viene scoperto Stuxnet. Il primo malware di stato, diffuso dal governo USA in collaborazione col governo Israeliano con lo scopo di sabotare la centrale nucleare iraniana di Natanz. (diffusione iniziata nel 2006 con il governo Bush nell'ambito dell'operazione „Giochi Olimpici“ che prevedeva una serie di attacchi contro l'Iran)
  16. 16. Dicembre 2010 – I sostenitori di Wikileaks sferrano un attacco DDoS a Paypal e varie società di servizi finanziari. #OpPayback per aver bloccato i finanziamenti degli utenti al sito WikiLeaks
  17. 17. Ottobre 2011 – Il governo tedesco commissiona alla Digitask la realizzazione di una cimice informatica per intercettare e registrare le comunicazioni Skype per Windows. I dati vengono trasmessi a due server localizzati negli Stati Uniti e in Germania.
  18. 18. Ottobre 2012 – Il New York Times denuncia una serie di attacchi riconducibili al governo cinese. Violati gli account email di giornalisti e dipendenti. Il NYT aveva pubblicato un articolo sulle indagini riguardanti il primo ministro Wen Jiabao e la fortuna fatta da alcuni suoi parenti.
  19. 19. Novembre 2012 – Viene individuato Wiper. Un soldato inviato in missione sul campo di battaglia per rimuovere le tracce di Stuxnet.
  20. 20. Novembre 2013 – Una vulnerabilità di tipo 0day in Firefox 17 ESR, versione usata da TOR Browser per navigare il deep web, viene sfruttata dal FBI per risalire all'identità di utenti TOR.
  21. 21. Qualcuno la chiama cyberwar. Più che di guerra, per la maggior parte dei casi, forse è meglio parlare di cyber spionaggio o, appunto, operazioni mirate con coinvolgimento dello stato.
  22. 22. Operazioni ambigue: 2013 - Regin → Stati Uniti/Regno Unito/Cina (?) 2014 - Attacco a Sony → Corea del Sud/ISIS (?)
  23. 23. Non tutti sono nelle condizioni di investire ingenti somme per sferrare un attacco
  24. 24. Metodi alternativi
  25. 25. Informazioni reperibili online senza bisogno di scomodare il profondo web. Carte di credito valide, lista di siti web vulnerabili (sqli), account compromessi, etc.
  26. 26. Per chi sa cercare non è difficoltoso reperire queste informazioni.
  27. 27. Vulnerabilità shellshock, lista di oltre 400 web server vulnerabili
  28. 28. Recente lista di domini governativi vulnerabili
  29. 29. Isis, attacco ai governi
  30. 30. Isis, attacco al Washingtonpost
  31. 31. La propaganda social
  32. 32. The Dawn of Glad Tidings Per restare aggiornati su tutte le attività del gruppo
  33. 33. Target
  34. 34. Isis, bandiera nera sul Colosseo
  35. 35. Vi risparmio altri tipi di propaganda jihadista Foto e video choc di decapitazioni e massacri divulgate sui social
  36. 36. La risposta di Anonymous al Terrorismo Islamico #OpISIS #GhostSec
  37. 37. #OpISIS – La risposta di Anonymous al Terrorismo Islamico
  38. 38. #OpISIS – La risposta di Anonymous al Terrorismo Islamico
  39. 39. #OpCharlieHeddo
  40. 40. Anonymous #Op* Le operazioni del gruppo hacktivista
  41. 41. Anonymous, attacco a Farmaciegravidanza.gov.it
  42. 42. Anonymous, attacco a Padiglioneitaliaexpo2015.com
  43. 43. Anonymous, attacco a Best Union (impresa coinvolta nell'organizzazione evento Expo2015). I dati sono in chiaro.
  44. 44. Anonymous, attacco a Difesa.it
  45. 45. Che fne fanno i dump? Nomi, indirizzi email, carte di credito, informazioni personali
  46. 46. Cosa può accadere se queste informazioni fniscono nelle mani sbagliate?
  47. 47. Il rischio: operazioni mirate a singoli individui o attraverso singoli individui.
  48. 48. Social engineering
  49. 49. Ransomware - Lock Screen - MBR - Data Encryption
  50. 50. Ransomware: Lock Screen
  51. 51. Ransomware: Master Boot Record
  52. 52. Ransomware: Data Encryption (aka Cryptolocker)
  53. 53. Non chiamiamoli. Chiamiamoli criminali! ...e quindi?
  54. 54. Dove sono i BACKUP?
  55. 55. NON ho i BACKUP ma ho sentito parlare di decryptolocker! Lavora con poche varianti, di certo non aiuta per le nuove.
  56. 56. Quindi PAGO e recupero i miei dati? Si, ma potresti perdere altro.
  57. 57. Non dimentichiamo che sono dei criminali, potrebbero – non è una novità - fregarti per una seconda volta. Il decryptor può contenere una backdoor
  58. 58. Quindi? Chiedere una consulenza a una persona esperta in materia prima di avventurarsi.
  59. 59. Grazie per l'attenzione. Gianni Amato | @guelfoweb

×