Mini Budget Microcontrollers: Cheap Microcontrollers for IoT and Fun
No ratings
Presented at BSidesTampa 2019 by
Microprocessors and microcontrollers continue to get more powerful and inexpensive. For about $3.00, you can get a WiFi enabled microcontroller that can be used with various sensors to dim lights, measure temperature and humidity and many other things.In this session, we will look at some of the popular hobby microcontrollers including Arduino clones, ESP8266-based boards and ATtiny boards, as well as the software and sensors commonly used with them.We will continue by discussing examples of how these incredible little devices can be used in home automation situations, WiFi hacking and just for fun. Topics will include: - Common versions of microcontrollers - Programming the microcontrollers - Using ESPEasy on ESP8266 microcontrollers - Sensor selection and types Keynote - BEC: The Rest of the StoryEric HuberN/AN/AMost BEC presentations range from awful to adequate. The better ones nail the information security and incident response portion very well, but then either neglect to cover what happens after the payment has been initiated by the victim or provides abject erroneous content such as saying that recovery of funds is impossible after a certain amount of time.This presentation will, of course, cover the history of business email compromise attacks starting with how organized crime rings used malware such as Dyre and active social engineering methods to steal banking credentials including 2FA information to initiate fraudulent payments using primary wire transfers. We'll then dive into what happened with fraudsters figured out that just asking for money was lower cost by using social engineering, open source intelligence, and email account takeovers.I'll discuss the different types of fraud rings that are engaging in this activity and also illustrate how organized crime rings engage in poly-fraud methods where they interwine different types of fraud such as BEC, romance scams, and card fraud into a comprehensive flow of funds back into their organizations.The second portion of the presentation will be what distinguishes this presentation from most other ubiquitous BEC presentations which will cover what happens once the payment has been sent. The key portions of this part of the presentation is educating students on how law enforcement investigates these crimes and how the recovery process works and can be maximized by the student to greatly increase the chances of recovering funds.This part of the presentation will talk about the history of correspondent banking and provide the student with an overview of payment rails such as wire and ACH which an emphasis on how the recovery options work and how the student can look like a rock star in their organization by maximizing the chances of recovering the stolen funds such as leveraging the FBI's financial fraud kill chain process.