The malware monetization machine

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Tony Anscombe
The Malware Monetization Machine
SPO2-R11
VP and Senior Security Evangelist
Ava...

The Malware
Monetization
Machine
Tony Anscombe ***********

#RSAC
Malware Inc. The Business
3

#RSAC
Malware Inc. The Business
4
30 employees
Healthcare,
vacation, lunch,
gym membership
Goal: grow distribution
and use...

#RSAC
Malware Inc. Products and Services
5
Software distribution
Data storage and encryption
Data collection and sales
Sup...

#RSAC
Malware Inc. Software Distribution Q4 Recap
6
Q4 software distribution campaigns
Email delivery
• 20m emails deliver...

#RSAC
Malware Inc. Software Distribution Q4 Recap
7
Q4 software distribution campaigns
Hosted website downloads
• Automate...

#RSAC
Malware Inc. Q4 Data Business
8
Q4 data collection
Mobile App distribution
Collected from 3rd parties
Service redire...

#RSAC
Malware Inc. Bonus Payments
Over achievement on goals
Revenue exceeded target
All staff will receive a 110% bonus
We...

#RSAC
Malware Inc. Bonus Payments
Over achievement on goals
Revenue exceeded target
All staff will receive a 110% bonus
We...

#RSAC
Malware Inc. Q1 Target Markets
11

#RSAC
Malware Inc. Q1 Target Markets
High
monetizing
countries
12

#RSAC
Malware Inc. Q1 Initiatives
13
A/B testing of offer screens

#RSAC
Malware Inc. Q1 Testing Payment Methods
14

#RSAC
Malware Inc. Q1 Translation
15
12 Languages to be offered

#RSAC
Malware Inc. Q1 Time Sensitive Offers
16
Early purchase discounts

#RSAC
Malware Inc. Q1 Detecting Fraud
17

#RSAC
Malware Inc. Q1 Legacy Customers
18

#RSAC
Malware Inc. Q1 Software Sales
19
Product sales security software

#RSAC
Malware Inc. Q1 Identity Duplication
20
Stealing
login
details

#RSAC
Malware Inc. Q1 Identity Duplication
21
X

#RSAC
Malware Inc. Q1 Mobile
22

#RSAC
Malware Inc. EOL Products
23
Banking Trojans
Premium rate SMS

#RSAC
Affiliate/Partner Sales
Victims
Affiliates
The boss
24

#RSAC
Malware Inc. Q1 Outsourced Engineering
25
Bot nets/herders
Exploit writers
Malware writers
Infrastructure/tool provi...

#RSAC
Malware Inc. The Competition
26

How do we combat?

#RSAC
Overall security threat
is growing in complexity
Mobile threats
are also accelerating
People’s Security Needs are Gr...

#RSAC
Probability of Attack - The Americas
31

#RSAC
Probability of Attack - The Americas
32
CA: 15%
US: 14%
MX: 21%
BR: 20%
PE: 27%
FR: 16%
PT: 18%
MA: 29%
SN: 28%
…

#RSAC
Probability of Attack - Most of ROW
33

#RSAC
Probability of Attack - Most of ROW
34
CZ: 27%
EG: 25%
RU: 25%
ET: 41%
KZ: 27%
SA: 14%
TZ: 23%
IN: 28%
LK: 29%
…

#RSAC
How do we combat?
35
Incidents per day
23.7 million

#RSAC
How do we combat?
36
Incidents - rolling 30
687.0 million

#RSAC
Where do threats hide?

#RSAC
Ransomware - 2016
#1 Threat
150 new strains of ransomware
128,108,948 x $500 =
(detections) (average ransom)

#RSAC
Ransomware - 2016
#1 Threat
150 new strains of ransomware
128,108,948 x $500 =
$ 64,054,474,000
105% growth year on ...

#RSAC
Ransomware Hotspots
1. US
2. Brazil
3. Russia
4. UK
5. Mexico
6. Italy
7. Spain
8. Canada
9. Poland
10. Australia
11...

#RSAC
Combatting Ransomware
Many different forms
Scareware, screen lockers,
crypto lockers, Doxingware
Ransomware is detec...

#RSAC
Connected devices estimated to reach up to 50 billion by 2020
Source: Cisco IBSG Report
42
Internet of Things is Exp...

#RSAC
Enslaved IoT Devices
IoT attacks more frequent:
• DDoS attack on Dyn
• 900,000 Telekom routers attacked
• 2016: from...

#RSAC
Avast Confidential
44
Over 400M endpoints acting as
sensors. Allow us to detect and
neutralize threats fast.
Largest...

#RSAC
Best Practices for a Ransomware Defense:
45
Ensure your systems, applications and devices are fully
updated and patc...

#RSAC
Summary
46
Anti-Malware is a
passionate business
Malware
is a business X

#RSAC
Tony Anscombe
tony.anscombe@avast.com

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 47 Ad

View on Slideshare

1 of 47 Ad