From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams...

13
From Ransomware to Cryptojacking: Think AND not OR John Shier Sr. Security Advisor - @john_shier November 2018 – ITAPA, Bratislava

Transcript of From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams...

Page 1: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

From Ransomware to Cryptojacking:

Think AND not OR

John ShierSr. Security Advisor - @john_shier

November 2018 – ITAPA, Bratislava

Page 2: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

2

Page 3: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

PyPi

Page 4: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

AppleJeus

4

src: https://securelist.com/operation-applejeus/87553/

Page 5: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

MikroTik

Page 6: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

6

GhostMiner

Page 7: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

Is it worth it?

7

Page 8: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

Profit?

8

Page 9: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

GhostMiner

9

Page 10: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K
Page 11: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

Think AND not OR

11

Page 12: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

SamSam

12

Page 13: From Ransomware to Cryptojacking · Payment History . The Biggest Cryptocurrency Hacks and Scams Reported Loss (USO) • Less than 8100K - $300M' $17PM : $50M one dot $1M • 900K

$900K Donated by Physics Dept.’s Soljacic Receives MIT ...

$900K Donated by Physics Dept.’s Soljacic Receives MIT ...

AN IT MANAGER’S GUIDE: CRYPTOJACKING, THE THREAT TO ... · Adblockers offer the most accessible and cost-effective solutions to businesses. Users of ad blockers can also employ

AN IT MANAGER’S GUIDE: CRYPTOJACKING, THE THREAT TO ... · Adblockers offer the most accessible and cost-effective solutions to businesses. Users of ad blockers can also employ

The2017ILAEclassification ofseizuretypesandthe epilepsies ... · Journal Identification = EPD Article Identification = 0957 Date: April 12, 2018 Time: 2:17pm Epileptic Disord,

The2017ILAEclassification ofseizuretypesandthe epilepsies ... · Journal Identification = EPD Article Identification = 0957 Date: April 12, 2018 Time: 2:17pm Epileptic Disord,

Street Smarts101 · Embed simple, open, and automated security Botnets, cryptojacking, and good old fashioned ransomware. These are the things that can keep IT personnel awake at

Street Smarts101 · Embed simple, open, and automated security Botnets, cryptojacking, and good old fashioned ransomware. These are the things that can keep IT personnel awake at

320k 900k - Yellow Pages

320k 900k - Yellow Pages

CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural … · 2020. 6. 24. · 97.87% of hidden miners with a low false-positive rate (0.74%). We compare CoinPolice performance

CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural … · 2020. 6. 24. · 97.87% of hidden miners with a low false-positive rate (0.74%). We compare CoinPolice performance

FY16 Budget Recommendation Update - Boston Public Schools...Mar 09, 2015  · – Straight-line calculation of transportation eligibility for $900K • Impacts ~2,400 students who

FY16 Budget Recommendation Update - Boston Public Schools...Mar 09, 2015  · – Straight-line calculation of transportation eligibility for $900K • Impacts ~2,400 students who

New POSTER: Content-Agnostic Identification of Cryptojacking in …yebof/paper/feng2020crypto.pdf · 2 days ago · POSTER: Content-Agnostic Identification of Cryptojacking in Network

New POSTER: Content-Agnostic Identification of Cryptojacking in …yebof/paper/feng2020crypto.pdf · 2 days ago · POSTER: Content-Agnostic Identification of Cryptojacking in Network

Securonix Threat Research: CRYPTOJACKING ATTACKS - …€¦ · 2 Security Analytics. Delivered. Figure 1: Persistent Cryptomining Jexboss Initial Foothold Payload - Repeated Payload

Securonix Threat Research: CRYPTOJACKING ATTACKS - …€¦ · 2 Security Analytics. Delivered. Figure 1: Persistent Cryptomining Jexboss Initial Foothold Payload - Repeated Payload

Healthcare Technology Management - Geneva Association · Introducing TBS Founded in Italy with a global turnover of €232m (£165 million - 2014) managing 900K devices worldwide

Healthcare Technology Management - Geneva Association · Introducing TBS Founded in Italy with a global turnover of €232m (£165 million - 2014) managing 900K devices worldwide

Andrew P. Sage c04.tex V1 - 11/26/2008 4:17pm Page 205 4 ...sysengr.engr.arizona.edu/publishedPapers/ReqPageProofs2009.pdf · Andrew P. Sage c04.tex V1 - 11/26/2008 4:17pm Page 205

Andrew P. Sage c04.tex V1 - 11/26/2008 4:17pm Page 205 4 ...sysengr.engr.arizona.edu/publishedPapers/ReqPageProofs2009.pdf · Andrew P. Sage c04.tex V1 - 11/26/2008 4:17pm Page 205

Follow us on: Twitter, Instagram, Facebook, LinkedIn ... › resource-downloads › Datto...dropping 15 percentage points. This tracks with mainstream reports that cryptojacking is

Follow us on: Twitter, Instagram, Facebook, LinkedIn ... › resource-downloads › Datto...dropping 15 percentage points. This tracks with mainstream reports that cryptojacking is

Report : CZR0002E Date: MISSOURI JUDICIARY 03-Jul-2014 ...bloximages.chicago2.vip.townnews.com/emissourian...03-Jul-2014 01:34:17PM 4 MISSOURI JUDICIARY Franklin County Calendar For

Report : CZR0002E Date: MISSOURI JUDICIARY 03-Jul-2014 ...bloximages.chicago2.vip.townnews.com/emissourian...03-Jul-2014 01:34:17PM 4 MISSOURI JUDICIARY Franklin County Calendar For

MINOS*: A Lightweight Real-Time Cryptojacking Detection System

MINOS*: A Lightweight Real-Time Cryptojacking Detection System

How USPI Saved $900k Creating Its New Revenue Cycle Dashboard

How USPI Saved $900k Creating Its New Revenue Cycle Dashboard

VeelashaMoonsamy RadboudUniversity,TheNetherlands … · Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale,

VeelashaMoonsamy RadboudUniversity,TheNetherlands … · Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale,

Spark Digital Sceptre S8 review EN - pae-web.presonusmusic.com · Recreating*a*Classic:*TheSceptre*S84*Review* * * * * * * * * * * * * * * * * * * 1"of"18"""""9/27/134:17PM"

Spark Digital Sceptre S8 review EN - pae-web.presonusmusic.com · Recreating*a*Classic:*TheSceptre*S84*Review* * * * * * * * * * * * * * * * * * * 1"of"18"""""9/27/134:17PM"

cyber landscape presentation · 2018. 9. 11. · Intelligence. Trend 4: Weak Internet of Things (IoT) • 30 billion IoT devices estimated in 2020 (Cisco, 2018) Trend 5: Cryptojacking

cyber landscape presentation · 2018. 9. 11. · Intelligence. Trend 4: Weak Internet of Things (IoT) • 30 billion IoT devices estimated in 2020 (Cisco, 2018) Trend 5: Cryptojacking

FCA BROWN BAG DECEMBER 2013 @JENNI_BURTON. GROWING DIGITAL CONNECTIONS | DEFINING DIGITAL CONNECTIONS 2 2M Email Addresses 900K Mobile #’s 20K FB Fans.

FCA BROWN BAG DECEMBER 2013 @JENNI_BURTON. GROWING DIGITAL CONNECTIONS | DEFINING DIGITAL CONNECTIONS 2 2M Email Addresses 900K Mobile #’s 20K FB Fans.

900k 000B 110B 12B 400 H 1 1 305, 50 ... - ouc.daishodai.ac.jpouc.daishodai.ac.jp/files/research/high_school/business_idea/... · 900k 000B 110B 12B 400 H 1 1 305, 50 800B x 800B

900k 000B 110B 12B 400 H 1 1 305, 50 ... - ouc.daishodai.ac.jpouc.daishodai.ac.jp/files/research/high_school/business_idea/... · 900k 000B 110B 12B 400 H 1 1 305, 50 800B x 800B