Examining Dark Web Trade - Your Cybersecurity Blind Spot

19
Examining Dark Web Trade – Your Cybersecurity Blindspot

Transcript of Examining Dark Web Trade - Your Cybersecurity Blind Spot

Page 1: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Examining Dark Web Trade – Your Cybersecurity Blindspot

Page 2: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Today’s Speakers

2

Jason PolancichFounder & Chief ArchitectSurfWatch Labs

Adam MeyerChief Security StrategistSurfWatch Labs

Page 3: Examining Dark Web Trade - Your Cybersecurity Blind Spot

What is the Dark Web?

3

Page 4: Examining Dark Web Trade - Your Cybersecurity Blind Spot

4

Anonymous Overlays

Page 5: Examining Dark Web Trade - Your Cybersecurity Blind Spot

There are Many Dark Web Threats to Your Business

• Hacking for Hire

• PII/Identity Info/Credit Cards

• Cyber Exploits for Sale

• Vulnerabilities for Sale

• Stolen IP, Designs & Counterfeits

• Spam & Phishing Campaigns for Hire

• Doxxing & Investigation for Hire

• Hacktivist Targeting Forums

• Insider Threat for Hire

5

Page 6: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Compromised Accounts

6

Page 7: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Card Skimmers

7

Page 8: Examining Dark Web Trade - Your Cybersecurity Blind Spot

What’s at Stake and Why You Should Care

• Brand and Reputation

• Customer Loyalty

• Intellectual Property

• Legal Defenses

• Sales

• IT Baselines

• Cybersecurity Strategy

Direct Impact on Your Business and Bottom Line!

8

Page 9: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Top Targets• Big Banks• Small Banks/Credit Unions• Pharm• Apparel• Hospitality

Market is constantly expanding!

9

• IT/Software• Online Entertainment• Publishing• Governments

(Muni, State, Federal)

Page 10: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Why Isn’t Dark Web Intelligence More Common in Cybersecurity Programs?

Where Do You Begin???• Cyber intel immaturity

• Lack of Dark Web understanding

• How to link intel to tactical cyber defense

• Dynamic and dangerous

• What are the legal lines?

10

Page 11: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Vulnerabilities (vBulletin)

11

Page 12: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Carding (Capital One)

12

Page 13: Examining Dark Web Trade - Your Cybersecurity Blind Spot

0-Days (Wordpress)

13

Page 14: Examining Dark Web Trade - Your Cybersecurity Blind Spot

PII/Identities

14

Page 15: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Accounts (Wyndham)

15

Page 16: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Dark Web Intelligence Can Improve Your Cyber Defense

• Average breach detection time is more than 200 days!

• Shift to prevention-based focus:

• Understand attack execution methods based on cyber trends related to your business profile

• Predict potential targeting of your systems and information

16

Page 17: Examining Dark Web Trade - Your Cybersecurity Blind Spot

What are the Best Ways to Leverage Dark Web Intel?

1. Services-based Investigations/Forensics

2. HUMINT Persona-Driven Collection

3. “Deep Sea Harvesting” and databasing of Available Dark Web Data

4. All of the above

17

Page 18: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Q&A and Additional SurfWatch Labs Resources

SurfWatch Dark Web Intel Service: www.surfwatchlabs.com/dark-web-intelligence

Sample Dark Web Intelligence Report:info.surfwatchlabs.com/dark-web-report

Personal SurfWatch Consultation:info.surfwatchlabs.com/dark-web-service-consultation

Shine a Light on Your Dark Web Risks

18

Page 19: Examining Dark Web Trade - Your Cybersecurity Blind Spot

Thank You!

www.surfwatchlabs.comFollow us at: