Operating as an eCrime actor in China can be risky: more lucrative opportunities elsewhere, tight internet controls and frequent crackdowns mean that the landscape is very different from that of other geographies. Nevertheless, an underground ecosystem exists, and understanding it clearly is vital to accurately gauge the risks it presents.This presentation will dive into some of the background to operating as an eCrime actor in China, and how the underground eCrime marketplaces operate. In the interests of time, we will focus on the collection of 肉鸡 ("meaty chickens" - Chinese slang for infected machines), and present how guidance is shared on how to get started. Specifically, we'll cover how we were able to pivot from that to uncover a Chinese-language mass-scale distribution network, and we'll detail how access is traded and what it is being used for. Most importantly, we'll cover how people end up falling for it and how organizations globally have been affected.Operating in or in relation to China poses a unique set of risks and challenges, and visibility and awareness of these is still growing. Information and analysis in this presentation will help to broaden this awareness and give valuable insight that is not readily available.NOTE: AVAILABLE IN-PERSON ONLY; NOT AVAILABLE FOR ON-DEMAND VIEWING.