REAL-TIME MALICIOUS DOMAIN DETECTION AND MALICIOUS ACTIVITY ANALYSIS

No ratings

Presented at Hack.Lu 2012 by

Fyodor Yarochkin

Vladimir -

"From the last year until now there is a quantum leap in cybercrime activity worldwide. We've been tracking massive malicious campaigns in Europe and Asia and monitoring how attacker tools and techniques evolve and change over time. In this presentation we will present historical records from last year until present moment on detected malicious activities, including botnet distribution, targeted attackers, covert channels used in botnet control and more. Compromised infrastructure is a valuable asset to the botmasters. We will also discuss a range of techniques, which attackers use to prevent automated detection of their infrastructure and make manual analysis difficult. Further, we will demonstrate tools and methods, which we use to perform real-time malicious domain detection and malicious activity analysis."