This presentation will cover emerging internet threats and explore the financial motives and mechanisms behind modern cyber crime. The content of this presentation will consist of a set of incidents case studies raging from ISP and Telecom compromises, to banking networks and web hosting companies at enormous scale. We'll discuss the techniques used by attackers to compromise large number of systems and domains. Tools and toolkits that we have developed to monitor, investigate and analyze malicious activity; We will also examine the hidden part of the iceberg to understand motives behind such activities. For the presentation content, expect highly technical case studies mixed up with light-weight analysis data. For the tools coverage we'll discuss previously unreleased set of tools that we used to investigate HTTP traffic hijacking attacks, MiM systems compromise and framework that we use for large scale data mining. Fyodor Yarochkin (TSTF, o0o.nu) is a security analyst at Armorize. He is happy programmer and AI hobbyst in his free time.