New Frontiers and New Trends in Phishing Detection via DNS
No ratings
Presented at SourceDublin 2017 by
With the rise in popularity of cryptocurrencies such as Bitcoin comes the need to defend against cyber attacks against this new technology and its consumers. Traders, economists and bankers are not alone in taking note of the recent Bitcoin frenzy, however; criminals staging phishing campaigns — malicious actors who've traditionally not made a habit of cherry-picking amongst your exploitable assets — have discovered that Bitcoin can provide an easier way to steal. Additionally, the rise of Ransomware has caused an increase in the demand of bitcoins for paying ransom by people who've never used them before. One of the results is that we have a large community of new Bitcoin wallet users who are not familiar with the technology and security. Criminal society reaction is reflected in the high number of different attacks on both Bitcoin users and companies which store the digital currency online. This talk will cover a wide variety of topics including machine learning techniques to uncover phishing attacks targeting users of online Bitcoin wallets and how Cisco blocks these attacks in real-time, and in some cases predictively blocks these sites before they have even been created by identifying bulletproof hosting infrastructures, as well as spear phishing attacks aiming executive staff of Bitcoin companies, DNS hijacking attempts on Bitcoin wallets, and problems introduced by bitcoin mixers. We will also discuss the interesting trends we see as the Bitcoin price fluctuates in conjunction with current events, the amount of phishing cybercrime against some of Bitcoin wallet companies correlates with it. We will also discuss Cisco collaborating with online wallet companies such as the world's most popular online wallet, Blockchain.info and Coinbase, to help improve their security posture. Additionally, we will share threat intelligence gathered from our machine learning classifiers and threat hunting in DNS, and discuss security posture Bitcoin companies need to adopt and the future of security for the technology.