Inman Connect: Securing Real Estate Transactions through Threat Intelligence

Thomas KinsellaSenior Manager, Cyber Intelligence & Investigations

2

2,260 confirmed data breaches in 2016

2.2 Billion compromised records

The forecasted average loss for a breach of 1,000 records is between $52,000 and $87,000

Customers, especially businesses, are using security as a discriminator

The Real Estate Industry is a target!

Why Are You Here? Why Am I Here?

Real Estate?

4

5

The Switch!

6

Future Business Email Compromise (BEC) Ecosystem

BEC

Infrastructure

Phishing

Interception

Mule Management

Money Transfer

Malware

Mule PickupsExchange (e.g. BTC)Laundering Escrow Services

WFH RecruitmentCommunicationCashout Services

Target Email ListSend PhishCheck Phished Creds Detect Transactions

Phishing PagesNew DomainsHacked WebsitesBulletproof Hosts

Create Inbox RulesDesign InvoicesCommunicate w/ Buyers & Sellers

Design Exploit KitCoding InjectionsCrypting ServicesAV Checking

Threat Intelligence

8

Key Actions!

10

Key Actions!

This Week: Network – Leverage industry knowledge to find out what companies are doing about this issue

This Quarter:

Educate – Train staff to detect and report phishing and social engineering attemptsUse Strong Authentication – Utilize 2-Factor Authentication, Password Managers; monitor for corporate emails in third-party data breaches

This Year:

Create Threat Intelligence – Create a program to receive (and share) known Indicators of Compromise (IOCs)Hunt – Begin actively searching for known tactics, techniques and procedures in your environment

Questions

Thank you