Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers - PowerPoint PPT Presentation

Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers cristine@cert.br � Centro de Estudos, Resposta e Tratamento de Incidentes de Segurança no Brasil Núcleo de Informação e Coordenação do Ponto BR Comitê Gestor da Internet no Brasil 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

The Brazilian Internet Steering Committee - CGI.br CGI.br is a multi-stakeholder organization created in 1995 by the Ministries of Communications and Science and Technology to coordinate all Internet related activities in Brazil. Among the diverse responsibilities reinforced by the Presidential Decree 4.829, has as the main attributions: • to propose policies and procedures related to the regulation of Internet activities • to recommend standards for technical and operational procedures • to establish strategic directives related to the use and development of Internet in Brazil • to promote studies and recommend technical standards for the network and services’ security in the country • to coordinate the allocation of Internet addresses (IP) and the registration of domain names using <.br> • to collect, organize and disseminate information on Internet services, including indicators and statistics http://www.cgi.br/english/ 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

CGI.br and NIC.br Structure GOVERNMENT (Appointed) I. E. CIVIL SOCIETY (Elected) Administrative Support Executive Branch Legal Counsel Pubic Relations Domain Registration Studies and Surveys Internet Engineering W3C IP Assignment About ICT use and New Projects Brazilian Office 1 – Ministry of Science and Technology (Coordination) 11 – Internet Service Providers 2 – Ministry of Communications 12 – Telecommunication Infrastructure Providers 3 – Presidential Cabinet 13 – Hardware and Software Industries 4 – Ministry of Defense 14 – General Business Sector Users 5 – Ministry of Development, Industry and Foreign Trade 15 – Non-governmental Entity 6 – Ministry of Planning, Budget and Management 16 – Non-governmental Entity 7 – National Telecommunications Agency 17 – Non-governmental Entity 8 – National Council of Scientific and Technological Development 18 – Non-governmental Entity 9 – National Forum of Estate Science and Technology Secretaries 19 – Academia 10 – Internet Expert 20 – Academia 21 – Academia 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

CERT.br Activities Incident Training and Network Handling Awareness Monitoring − Courses − Coordination − Distributed − Presentations Honeypots − Facilitation − Support − Documents − SpamPots − Statistics − Meetings http://www.cert.br/about/ 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

Agenda • Overview of techniques used in the country • “Traditional” phishing • Malware enabled financial fraud – from simple trojans – to more sofisticated attacks 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

CERT.br Phishing Handling System MS IE, Firefox, Yahoo!, data Phishing UOL, Trendmicro donation URLs fetcher tester Download a copy of phishing Update uptime each phishing page online data Check status cases Extract and store data in a DB Donate data to refeed the no status partners system changed? yes no alert IH about validator archive the change status is IH manually closed yes offline? cases checks the new status We handle phishings hosted in Brazil or affecting Brazilian organizations 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

“Traditional” Phishing Statistics for 2010 - 2011 2010 2011 Total Cases: 7959 Total Cases: 12466 Unique URLs: 7826 Unique URLs: 12298 Unique SHA1s: 3609 Unique SHA1s: 6330 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

2010-2011 Timeline - Brazilian Brands �� 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

2011 Timeline - International Brands �� 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

�� Phishing Cases by Country Code (IP Allocation) �� 2010 �� 2011 � �� 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012

�� Domains Where Phishing Pages Were Hosted �� 2010 �� 2011 �� hosting companies �� URL shortener �� 2012 FIRST Symposium - São Paulo, Brazil, March 28, 2012 ��

Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers - PowerPoint PPT Presentation

Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers cristine@cert.br Centro de Estudos, Resposta e Tratamento de Incidentes de Segurana no Brasil Ncleo de Informao e Coordenao do Ponto BR Comit Gestor da

Fraud and Phishing Scam Response Arrangements in Brazil Marcelo H. P . C. Chaves mhp@cert.br

We know what you did this summer: Android Banking Trojan exposing its sins in the cloud

ToneTag Banking of Things Agenda ToneTag use cases ToneTag and banking of things

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing

Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the

VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing?

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing

Brazil: Early Perspectives and Use Cases Prof. Rodrigo Cavalcanti Universidade Federal do Cear

Trojan Horse Zion Maxwell and Kaylie Davis The Trojan horse The Greeks had a war against the

Brazil Brazil Brazil HDI Brazil FLO certified producers in Brazil - for export Category

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring:

of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing

RECENT CASES AFFECTING THE ENERGY INDUSTRY . Carrie J. Lilly Partner Energy & Mineral

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able

Phishing By: Joanna Georgiou Dhamija, R., Tygar, J. D., & Hearst, M. (2006, April 22). Why

Federal Information Systems Security Education Association Spear Phishing Agenda Definition

Social Engineering Phishing & More Phishing Fake Email Accounts Real Email Accounts

Id Identify fy a Phishing Attack CWU Information Security Services Id Identify fy a Phishing

Analyzing the Effectiveness of Phishing at Network Level Sagar Mehta, Nitya Sundareswaran, Kevin

Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing Slide 1 Legitimate: Extended

Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers - PowerPoint PPT Presentation

Phishing and Banking Trojan Cases Affecting Brazil Cristine Hoepers cristine@cert.br Centro de Estudos, Resposta e Tratamento de Incidentes de Segurana no Brasil Ncleo de Informao e Coordenao do Ponto BR Comit Gestor da

Fraud and Phishing Scam Response Arrangements in Brazil Marcelo H. P . C. Chaves mhp@cert.br

We know what you did this summer: Android Banking Trojan exposing its sins in the cloud

ToneTag Banking of Things Agenda ToneTag use cases ToneTag and banking of things

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing

Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the

VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing?

PHISHING IN DEPTH (ATTACKS &amp; MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing

Brazil: Early Perspectives and Use Cases Prof. Rodrigo Cavalcanti Universidade Federal do Cear

Trojan Horse Zion Maxwell and Kaylie Davis The Trojan horse The Greeks had a war against the

Brazil Brazil Brazil HDI Brazil FLO certified producers in Brazil - for export Category

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring:

of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing

RECENT CASES AFFECTING THE ENERGY INDUSTRY . Carrie J. Lilly Partner Energy &amp; Mineral

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able

Phishing By: Joanna Georgiou Dhamija, R., Tygar, J. D., &amp; Hearst, M. (2006, April 22). Why

Federal Information Systems Security Education Association Spear Phishing Agenda Definition

Social Engineering Phishing &amp; More Phishing Fake Email Accounts Real Email Accounts

Id Identify fy a Phishing Attack CWU Information Security Services Id Identify fy a Phishing

Analyzing the Effectiveness of Phishing at Network Level Sagar Mehta, Nitya Sundareswaran, Kevin

Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing Slide 1 Legitimate: Extended

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing

RECENT CASES AFFECTING THE ENERGY INDUSTRY . Carrie J. Lilly Partner Energy & Mineral

Phishing By: Joanna Georgiou Dhamija, R., Tygar, J. D., & Hearst, M. (2006, April 22). Why

Social Engineering Phishing & More Phishing Fake Email Accounts Real Email Accounts