anatomy of a data theft attack
play

Anatomy of a Data Theft Attack For Sacramento ISACA January 2016 - PowerPoint PPT Presentation

Feb 04, 2024 •960 likes •1.32k views

Anatomy of a Data Theft Attack For Sacramento ISACA January 2016 Mike Landeck Cyber Security Consultant Agenda 1. USB Attacks 2. QR Code Attacks 3. Advanced Phishing Attacks 4. Malvertising 5. Watering Hole Attacks 6. How Simple Browser

  1. Anatomy of a Data Theft Attack For Sacramento ISACA January 2016 Mike Landeck Cyber Security Consultant

  2. Agenda 1. USB Attacks 2. QR Code Attacks 3. Advanced Phishing Attacks 4. Malvertising 5. Watering Hole Attacks 6. How Simple Browser Modifications Would Have Stopped These 7. Name Your Own Adventure (Time Permitting)

  3. DISCLAIMER • I do not speak on behalf of my employer. The information and perspectives I present are personal and do not represent those of my employer. • When I say “We have seen” I’m typically referring to the industry in general and not necessarily my current employer or any previous clients. • While it may look like we’re hacking on the Internet, everything we’re attacking today exists solely on my laptop. No laws are being broken

  4. Rubber Ducky Downloads • OSX Internet • grab • local dns • OSX Grab • wifi Protocol Slurp passwords and poisoning Minecraft backdoor • OSX User Backdoor email • netcat FTP Account • WiFi • Android 5.x • ducky phisher download Password and password Lockscreen • EICAR AV test and upload to FTP grabber • Basic Terminal • fork bomb reverse • OSX iMessage • deny net Commands Ubuntu • ftp download shell Capture access • batch wiper drive upload • non • OSX Internet • disable avg eraser • generic batch malicious Protocol Slurp 2012 • Chrome Password • hide cmd auto • OSX Local DNS • OSX Root Stealer window defacer Poisoning Backdoor • copy file to desktop • Information • OS X Wget • OSX • OSX User • create wireless Gathering and Passwordless Backdoor network association Ubuntu Execute SSH access (ssh • OSX Ascii keys) Prank

  5. Rubber Ducky Downloads

  6. Self-inflicted Gunshot Wounds QR Codes and Millennials

  7. Self-inflicted Gunshot Wounds

  8. Self-inflicted Gunshot Wounds

  9. Risk Path for a Data Theft Attack Physical Infiltration Near-Site Attack Remote Cyber Attack- Human Target “spear phishing” Remote Cyber Attack- Perimeter

  10. Name a Major Breach that DIDN’T Start With One of These Watering Hole Phishing Malvertising Organized Crime   Nation States   Hacktivists  

  11. Making it Personal Attacking ISACA

  12. Attacking Sacramento’s ISACA Chapter    

  13. Go-time Email Examples- Malware To : vicepresident@isaca-sacramento.org To : president@isaca-sacramento.org From : president@isaca-sacramento.org From : communications@isaca-sacramento.org Subject : For Web Site Subject : Sacramento Chapter Account Discrepancy Maria- This just came in from ISACA about Katheryn- Please post this to the website ASAP some missing money. I don’t have David’s as the registration deadline is coming up. Please contact Mike for a Please contact Mike for a address in my phone. Can you please It’s the registration form for the CRISC exam. clean copy. clean copy. forward this to him ASAP? Also, please have David forward it to the membership. Thanks, Thanks, Howard Howard Attached : SacError.pdf Attached : June-2016-CRISC-Exam-Registration- Form_frm_Eng_1115.pdf

  14. Phishing Email Demo- Malware Writing and Distributing Malware using the Social Engineering Toolkit

  15. Phishing Email Demo- Credential Harvesting Phishing the Webmaster’s Credentials

  16. Go-time Email Examples- Getting the Webmaster’s Credentials To : webmaster@isaca-sacramento.org From : communications@isaca- sacramento.org Subject : Web Site Problems Please contact Mike for a clean copy. Katheryn- I think something is broken in the members’ section. Can you take a look at this page? Thanks, David

  17. How I View the Attack Process and Awareness Training Opportunities Social Media Job Sites Employee Profiles Google LinkedIn Religion Organizations Research Sites Scanning Professional Associations Who do you Corporate trust? Friends/Colleagues IT Professional Delivery Profile Tech Vectors Interests Personal IT What are you Web Site Memberships emotional about? Phishing & Social Exposures from Role-Based IT Engineering social media data Security Training Awareness

  18. Phishing Emails

  19. Actual Phishing Logins Exchange.pitt.edu.auth.logon.aspx.bluebird.vn Images.google.com Subdomain Domain Subdomain Domain Image credit: University of Pittsburg, pitt.edu

  20. Actual Phishing Logins

  21. Phished ISACA Login- Is it or isn’t it?

  22. Malvertising Google’s Double Click and Yahoo! Ads Have Both Fallen Victim

  23. Malvertising Examples: 1. JavaScript 2. Flash Malware (#1 Attack Vector) 3. Full Server Compromise Image Credit: riskmanagementmonitor.com

  24. Watering Holes Nation State’s Newest Attack Vector

  25. Watering Holes Example: Watering Hole Example Image credit: http://blog.smartekh.com/

  26. 4 Things You Can Do Right Now Prevent What I Have Demonstrated

  27. Sign in with a GUEST Account (Not Administrator) Can be downloaded from cybersecology.com/harden-firefox.pdf

  28. Modify Your Settings: Options Can be downloaded from cybersecology.com/harden-firefox.pdf

  29. Modify Your Settings: Add-ons Can be downloaded from cybersecology.com/harden-firefox.pdf

  30. Modify Your Settings: Add-ons Can be downloaded from cybersecology.com/harden-firefox.pdf

  31. How Well Does This Work? Hardened Default Full AV Common Browser Attack Vectors Browser Browser • Psuedo-malicious Flash Settings Settings Adobe • Psuedo-malicious JavaScript Flash JavaScript Antivirus • Infected ISACA PDF Infected PDF QR Code Sticker QR Code CyberSecOlogy Sticker URL • Watering Watering Hole Hole Attack Watering Hole Example • Malvertising

  32. Contact Info @MikeLandeck www.CyberSecology.com linkedin.com/in/mikelandeck MikeLandeckCyberSec  gmail.com Please provide me feedback by taking the survey at https://www.surveymonkey.com/r/WXFY2CG

  33. Questions

Recommend

Identity Theft Identity Theft Identity theft occurs when your personal information is stolen

Identity Theft Identity Theft Identity theft occurs when your personal information is stolen

Identity Theft Identity Theft Identity theft occurs when your personal information is stolen and used without your knowledge to commit fraud or other crimes Identity theft can cost you time and money. Tips for Preventing Identity Theft

322 views • 10 slides
The anatomy of health data Dr Heather Leslie @omowizard Anatomy (Greek anatom,

The anatomy of health data Dr Heather Leslie @omowizard Anatomy (Greek anatom,

The anatomy of health data Dr Heather Leslie @omowizard Anatomy (Greek anatom, dissection) is the branch of biology concerned with the study of the structure of organisms and their parts. Health data any data "related to health

405 views • 25 slides
the bottom line your data protects protecting to remedy the harm caused by identity theft. ties

the bottom line your data protects protecting to remedy the harm caused by identity theft. ties

24 and lost sales. 7 to the indictment, the thieves security breach. 8 According tion with the T.J. Maxx data of 11 individuals in connec- announced the indictment D e p a r t m e n t r e c e n t l y identity theft, the Justice catch the

561 views • 6 slides
Identity Theft By: Brian Paulsen How common is identity theft? According to the US Department of

Identity Theft By: Brian Paulsen How common is identity theft? According to the US Department of

Identity Theft By: Brian Paulsen How common is identity theft? According to the US Department of Justice, 10% of people over the age of 16 reported being victims of identity theft in 2016 (Harrell). Who is most susceptible? Multiple reports

233 views • 21 slides
Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo*

Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo*

Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo* Wonsuk Choi* Dong Hoon Lee Korea University * Co-first Authors Outline Introduction Attack Model Our Method Evaluation Discussion

627 views • 34 slides
Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo*

Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo*

Hold The Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft Kyungho Joo* Wonsuk Choi* Dong Hoon Lee Korea University * Co-first Authors Outline Introduction Attack Model Our Method Evaluation Discussion

487 views • 37 slides
or car for theft. 99% of home burglar alarms are false. Our HNP burglary-larceny-theft stats are

or car for theft. 99% of home burglar alarms are false. Our HNP burglary-larceny-theft stats are

Burglary and larceny-theft are very similar crimes, whereby burglary involves entering a house or car for theft. 99% of home burglar alarms are false. Our HNP burglary-larceny-theft stats are 40% of the city-wide average per household, which is

366 views • 5 slides
DNS Cache Poisoning Attack Introduction The purpose of this presentation is to dissect the

DNS Cache Poisoning Attack Introduction The purpose of this presentation is to dissect the

Anatomy of a DNS Cache Poisoning Attack Introduction The purpose of this presentation is to dissect the Domain Name System (DNS) Cache Poisoning Cyber attack. We will cover: - Real-world examples of DNS cache poisoning - A defjnition of

607 views • 58 slides
What will you learn? During this presentation you will learn: How ID theft and account fraud

What will you learn? During this presentation you will learn: How ID theft and account fraud

What will you learn? During this presentation you will learn: How ID theft and account fraud happen The effects of ID theft and fraud How to avoid becoming a victim Identity Protection Identity Theft is Rampant Number of victims rose

764 views • 30 slides
Training to Prevent Identity Theft Identity Theft is the fastest growing crime in America.

Training to Prevent Identity Theft Identity Theft is the fastest growing crime in America.

Training to Prevent Identity Theft Identity Theft is the fastest growing crime in America. The Social Security number is a major privacy concern for most people, because it links to information that is typically kept private. Exposing

326 views • 17 slides
SQL Hacking I NTRODUCTION Data theft is becoming a major threat. Criminals have identified

SQL Hacking I NTRODUCTION Data theft is becoming a major threat. Criminals have identified

SQL Hacking I NTRODUCTION Data theft is becoming a major threat. Criminals have identified where the gold is. In the last year many databases from fortune 500 companies were compromised. Database vulnerabilities affect all database

297 views • 8 slides
Employee Theft & What are the greatest areas of vulnerability? How and WHY do honest

Employee Theft & What are the greatest areas of vulnerability? How and WHY do honest

Vital Questions Preventing How common is theft in medical practices? Employee Theft & What are the greatest areas of vulnerability? How and WHY do honest people steal? How do you assess potential employees? Embezzlement

132 views • 10 slides
Why we need to tamper-proof our society Data manipulation poses a more systemic threat than theft

Why we need to tamper-proof our society Data manipulation poses a more systemic threat than theft

Why we need to tamper-proof our society Data manipulation poses a more systemic threat than theft or disruption Risks Command and Control Systems Military Logistics Financial systems Political institutions Mitigation Risk:

582 views • 9 slides
Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis Daniel Moghimi

Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis Daniel Moghimi

Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis Daniel Moghimi Moritz Lipp Berk Sunar Michael Schwarz 2018: Meltdown Attack? 2 2018: Meltdown Attack? Virtual Address Space User Space CPU Registers

1.14k views • 63 slides
Lecture 19: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas, Kevin Rader and

Lecture 19: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas, Kevin Rader and

Lecture 19: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas, Kevin Rader and Chris Tanner Outline Anatomy of a NN Design choices Activation function Loss function Output units Architecture CS109A, P ROTOPAPAS

897 views • 76 slides
Child Identity Theft: What to Know, What to Do Colleen Tressler FTC Division of Consumer &

Child Identity Theft: What to Know, What to Do Colleen Tressler FTC Division of Consumer &

Child Identity Theft: What to Know, What to Do Colleen Tressler FTC Division of Consumer & Business Education ctressler@ftc.gov consumer.ftc.gov IdentityTheft.gov Definition of Identity Theft Identity theft is the misuse of

459 views • 20 slides
Lecture 18: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas and Kevin Rader

Lecture 18: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas and Kevin Rader

Lecture 18: Anatomy of NN CS109A Introduction to Data Science Pavlos Protopapas and Kevin Rader Outline Anatomy of a NN Design choices Activation function Loss function Output units Architecture CS109A, P ROTOPAPAS , R ADER

819 views • 53 slides
IDENTITY THEFT FINANCIAL EDUCATION SERIES Equal Housing Lender. Member FDIC and Associated

IDENTITY THEFT FINANCIAL EDUCATION SERIES Equal Housing Lender. Member FDIC and Associated

4/2/2018 IDENTITY THEFT FINANCIAL EDUCATION SERIES Equal Housing Lender. Member FDIC and Associated Banc-Corp AGENDA Tips to avoid identity theft What you should do if you become a victim of identity theft How to obtain free

381 views • 4 slides
Attack on Traffic Systems These attack examples have happened in the past. We will take an

Attack on Traffic Systems These attack examples have happened in the past. We will take an

From start to finish how a cyber attack would be performed on traffic system, we will go over first day >> exploitation of the device >> the real-world aftermath. Mission Secure, Inc. Attack on Traffic Systems These attack examples

556 views • 18 slides
Identity Theft 101 Wanda Downs, AAP Director, CU Development & Marketing Identity Theft 101

Identity Theft 101 Wanda Downs, AAP Director, CU Development & Marketing Identity Theft 101

Identity Theft 101 Wanda Downs, AAP Director, CU Development & Marketing Identity Theft 101 Identity Theft 101 Wanda Downs First Carolina Corporate Credit Union, 2004 to present > Director of CU Development & Marketing AAP

440 views • 16 slides
Digital Forensics of Data Theft on the Google Cloud Platform TJEERD SLOKKER | FRANK WIERSMA

Digital Forensics of Data Theft on the Google Cloud Platform TJEERD SLOKKER | FRANK WIERSMA

Digital Forensics of Data Theft on the Google Cloud Platform TJEERD SLOKKER | FRANK WIERSMA SUPERVISOR: KORSTIAAN STAM Monday February 3 th Introduction MITRE ATT&CK Matrix 2 Research questions What design, utilizing exclusively GCP

737 views • 20 slides
VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

THE STATE OF PHISHING ATTACK VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of Phishing Counter Measures Reports on Phishing Isaac K. Acheampong Facilities Manager BSc IT, Dip. IT, Sec+ STATE OF

711 views • 34 slides
Security of Traffic Infrastructure RAJSHAKHAR PAUL Outline Introduction Anatomy of a Traffic

Security of Traffic Infrastructure RAJSHAKHAR PAUL Outline Introduction Anatomy of a Traffic

Green Lights Forever: Analyzing the Security of Traffic Infrastructure RAJSHAKHAR PAUL Outline Introduction Anatomy of a Traffic Infrastructure Case Study Threat Model Types of Attack Recommendation Broader Lesson Conclusion Outline

777 views • 36 slides
(1 in 4) Fraud (43%) (12.6 M) 2013 Identity Theft Report Javelin Strategy & Research FTC

(1 in 4) Fraud (43%) (12.6 M) 2013 Identity Theft Report Javelin Strategy & Research FTC

THE THE NEW NORM NEW NORM IDENTIT IDENTITY Y THE THEFT FT AND AND GO GOVERNMENT VERNMENT FRA FRAUD UD Identity Fraud Data Breach Government (1 in 4) Fraud (43%) (12.6 M) 2013 Identity Theft Report Javelin Strategy &

527 views • 17 slides

More recommend