Download as PDF, PPTX
Uploaded byPriyanka Aash
The malware monetization machine
The document discusses the business operations of a company involved in malware monetization, highlighting growth metrics, software distribution, and an overview of Q4's performance. It emphasizes the increasing complexity of security threats, particularly ransomware and mobile malware, while outlining strategies for combating these risks. Additionally, it mentions the importance of secure practices and offers recommendations for ransomware defense.
More Related Content
Similar to The malware monetization machine
The malware monetization machine
- 1. SESSION ID:SESSION ID: #RSAC TonyAnscombe The Malware Monetization Machine SPO2-R11 VP and Senior Security Evangelist Avast @TonyAtAVG
- 2.
- 3. #RSAC Malware Inc. TheBusiness 3
- 4. #RSAC Malware Inc. TheBusiness 4 30 employees Healthcare, vacation, lunch, gym membership Goal: grow distribution and use of software increasing LTV and ROI 2 offices located anywhere Revenue 2015 - $25m 2016 - $1bn 2017 - >2x growth?
- 5. #RSAC Malware Inc. Productsand Services 5 Software distribution Data storage and encryption Data collection and sales Support services
- 6. #RSAC Malware Inc. SoftwareDistribution Q4 Recap 6 Q4 software distribution campaigns Email delivery • 20m emails delivered to 12m unique users • Open rate • Execution of the software package • Conversion rates to paying customer
- 7. #RSAC Malware Inc. SoftwareDistribution Q4 Recap 7 Q4 software distribution campaigns Hosted website downloads • Automated - drive by download • Unique users vs actual delivery/installation • User initiated - click jacking • CTR - Click Through Rate 0.5%
- 8. #RSAC Malware Inc. Q4Data Business 8 Q4 data collection Mobile App distribution Collected from 3rd parties Service redirection Email campaigns
- 9. #RSAC Malware Inc. BonusPayments Over achievement on goals Revenue exceeded target All staff will receive a 110% bonus We shutdown for the holidays early, congratulations! 9
- 10. #RSAC Malware Inc. BonusPayments Over achievement on goals Revenue exceeded target All staff will receive a 110% bonus We shutdown for the holidays early, congratulations! 10 January 17, 2017 Locky down as cybercrime takes a brief December holiday
- 11. #RSAC Malware Inc. Q1Target Markets 11
- 12. #RSAC Malware Inc. Q1Target Markets High monetizing countries 12
- 13. #RSAC Malware Inc. Q1Initiatives 13 A/B testing of offer screens
- 14. #RSAC Malware Inc. Q1Testing Payment Methods 14
- 15. #RSAC Malware Inc. Q1Translation 15 12 Languages to be offered
- 16. #RSAC Malware Inc. Q1Time Sensitive Offers 16 Early purchase discounts
- 17. #RSAC Malware Inc. Q1Detecting Fraud 17
- 18. #RSAC Malware Inc. Q1Legacy Customers 18
- 19. #RSAC Malware Inc. Q1Software Sales 19 Product sales security software
- 20. #RSAC Malware Inc. Q1Identity Duplication 20 Stealing login details
- 21. #RSAC Malware Inc. Q1Identity Duplication 21 X
- 22. #RSAC Malware Inc. Q1Mobile 22
- 23. #RSAC Malware Inc. EOLProducts 23 Banking Trojans Premium rate SMS
- 24.
- 25. #RSAC Malware Inc. Q1Outsourced Engineering 25 Bot nets/herders Exploit writers Malware writers Infrastructure/tool providers
- 26. #RSAC Malware Inc. TheCompetition 26
- 29. How do wecombat?
- 30. #RSAC Overall security threat isgrowing in complexity Mobile threats are also accelerating People’s Security Needs are Growing Total malware threats, millions (Cumulative malware threat attacks, million) 2010 2011 2012 2013 2014 2015 47 65 470 183 100 326 0.35 1.01 4.26 10.6 585 2016 17.0 30 Mobile malware threats, millions (Cumulative malware threat attacks, million)
- 31. #RSAC Probability of Attack- The Americas 31
- 32. #RSAC Probability of Attack- The Americas 32 CA: 15% US: 14% MX: 21% BR: 20% PE: 27% FR: 16% PT: 18% MA: 29% SN: 28% …
- 33. #RSAC Probability of Attack- Most of ROW 33
- 34. #RSAC Probability of Attack- Most of ROW 34 CZ: 27% EG: 25% RU: 25% ET: 41% KZ: 27% SA: 14% TZ: 23% IN: 28% LK: 29% …
- 35. #RSAC How do wecombat? 35 Incidents per day 23.7 million
- 36. #RSAC How do wecombat? 36 Incidents - rolling 30 687.0 million
- 37.
- 38. #RSAC Ransomware - 2016 #1Threat 150 new strains of ransomware 128,108,948 x $500 = (detections) (average ransom)
- 39. #RSAC Ransomware - 2016 #1Threat 150 new strains of ransomware 128,108,948 x $500 = $ 64,054,474,000 105% growth year on year (detections) (average ransom)
- 40. #RSAC Ransomware Hotspots 1. US 2.Brazil 3. Russia 4. UK 5. Mexico 6. Italy 7. Spain 8. Canada 9. Poland 10. Australia 11. India 40
- 41. #RSAC Combatting Ransomware Many differentforms Scareware, screen lockers, crypto lockers, Doxingware Ransomware is detected on every protection layer, including behavioral analysis 14 ‘Free’ decryption tools available Decryption is a last resort Not Decryptable , 0.565 Decryptable , 0.3785 Plausible Decryption , 0.0565 41
- 42. #RSAC Connected devices estimatedto reach up to 50 billion by 2020 Source: Cisco IBSG Report 42 Internet of Things is Exploding Avast Confidential
- 43. #RSAC Enslaved IoT Devices IoTattacks more frequent: • DDoS attack on Dyn • 900,000 Telekom routers attacked • 2016: from more than 4.3 million routers scanned, 48% had some security vulnerability • More than 50% of all home routers use default passwords • 2 out of 5 people are unaware that their router has an administrative interface where they can log in to view and change their settings • 1 out of 7 log into their router’s admin interface weekly or monthly to check for updates43
- 44. #RSAC Avast Confidential 44 Over 400Mendpoints acting as sensors. Allow us to detect and neutralize threats fast. Largest, most sophisticated, most geographically dispersed threat detection network. World’s largest security-centric machine-learning network. About Avast Leveraging data analytics to improve customers online lifestyle. 8,524 virtual, 2,527 physical and 443 AWS servers 82,600 simultaneous VPN connections 2.1m DNS requests (normal and secure) per second 3.6tr URLs processed per year 45.8m concurrent connections Pushed 110pb of data in last three months
- 45. #RSAC Best Practices fora Ransomware Defense: 45 Ensure your systems, applications and devices are fully updated and patched Ensure you have strong layered anti-malware security solution Educate employees not to open suspicious attachments Disable Microsoft Office macros by default as a policy Keep recent backup copies, disconnected and offsite
- 46. #RSAC Summary 46 Anti-Malware is a passionatebusiness Malware is a business X
- 47.