Cat valorezi?

Click to edit Master title style

• Click to edit Master text styles– Second level• Third level– Fourth level Cât valorezi?Fourth level» Fifth level Cât valorezi?

Prețul datelor tale pe piața neagră

Ștefan TănaseSenior Security Researcher

June 10th, 2009 Event details (title, place)

yGlobal Research and Analysis TeamKaspersky Lab

AGORA Securitate – Bucuresti, Hotel Intercontinental, 14 Aprilie 2010


• Click to edit Master text styles– Second level• Third level– Fourth levelFourth level» Fifth level

IntroducereIntroducereDe ce ai valora ceva?


Click to edit Master title styleOricine are ceva valoros

• Click to edit Master text stylesCe inseamna internetul pentru tine?

C i– Second level• Third level– Fourth level

• Comunicare• Informare• LucruFourth level» Fifth level• Lucru• Cumparaturi


Click to edit Master title styleInformatia are valoare

• Click to edit Master text stylesAi un Card de credit? Ai un Computer?

– Second level• Third level– Fourth level

Ai cont pe Facebook?Tranzactionezi pe Forex?

Ai li t d A tiVi ?Fourth level» Fifth level

Ai un cont pe Twitter?Folosesti online banking? Ai un cont de email?

Ai o licenta de AntiVirus?

Ai cont pe Hi5?

J i j i li ?

Ai un cont de email?

Esti user sau moderator pe vreun forum?Joci jocuri online?

Stai pe Yahoo Messenger?Ai un cont de Paypal? S ?


Ai un cont de Paypal? Vorbesti pe Skype?

Click to edit Master title styleCrestere uriasa a malware-ului creat pentru furtul de informatie

• Click to edit Master text styles70000

80000Semnaturi


50000

60000

Fourth level» Fifth level

30000

40000

10000

20000

0

2005 2006 2007 2008 2009


Bankers PSW SpySursa: Kaspersky Lab

Click to edit Master title styleCarduri de credit pe piata neagra, 2009

• Click to edit Master text styles9%– Second level• Third level– Fourth level 34%Fourth level» Fifth level 27%

MasterCardAmerican ExpressVISADiscover

30%


Sursa: Kaspersky Lab



Cum iti sunt furate informatiile?Cum iti sunt furate informatiile?Cele mai populare metode de atac


Click to edit Master title styleFurtul de date: vectori de atac

• Click to edit Master text stylesPhishingInfectii malware– Second level

• Third level– Fourth level

Infectii malware


• Exploit-uriExploit uri• iFrame• Web 2.0 (social engineering)Web 2.0 (social engineering)• XSS• USB sticks


Click to edit Master title styleCarduri de credit

• Click to edit Master text stylesPretul depinde de tara de origina si de tipul cardului

– Second level• Third level– Fourth levelFourth level» Fifth level


Click to edit Master title styleServicii de online payment

• Click to edit Master text stylesBanci: pretul depinde de balanta contului


Online payment: pretul depinde de balanta contului si de istoricul tranzactiilor


de istoricul tranzactiilor

Click to edit Master title styleCine creeaza Trojan-Bankers? Top 10 tari:

• Click to edit Master text styles4%

3% 3%

– Second level• Third level– Fourth level Brazil; 36%

6%

4%4%

BrazilChinaSpainFourth level

» Fifth levelBrazil; 36%

7%

SpainRussiaMexicoPortugal

8%

8%

PortugalTurkeyIndiaUK

China; 21%8% UKUkraine



Click to edit Master title stylePhishing: Top 20 branduri targetate, 2009

1%

• Click to edit Master text styles2%

2%

2%1%1%1%1%

1%

1%PayPaleBayBank of America

– Second level• Third level– Fourth level P P l 41%

3%

3%2%

2% CHASEIRSHSBCAbbeyFourth level

» Fifth levelPayPal: 41%

5%

3%AbbeyAlly BankAllianceLeicesterHALIFAX

7%

NatWestMSNGoogleUBI

eBay: 16%7%UFifth Third BankFacebookCahootP t It li


Poste ItalianeSursa: Kaspersky Lab

Click to edit Master title styleEmail si retele sociale

Preturi in functie de domeniile folosite:• Click to edit Master text styles

•Domenii globale (Gmail, Yahoo!, Hotmail, etc.) – Second level• Third level– Fourth level

•Domenii locale (Mail.ru, Yandex.ru, etc.)




• Click to edit Master text stylesOferte pentru conturi de Facebook:




• Click to edit Master text stylesCostul depinde de cati follower-i ai si de cat de comercial este username-ul tau:



Click to edit Master title styleMalware pe retele sociale:






Ce altceva mai poate fi furat?Ce altceva mai poate fi furat?Servicii de comunicare si file-sharing


Click to edit Master title styleSisteme de file-sharing

• Click to edit Master text stylesRapidshare


• Spalare de bani• Conturi furate



Click to edit Master title styleSkype

• Click to edit Master text stylesPretul depinde de balanta contului



Click to edit Master title styleInstant Messaging (IM)

• Click to edit Master text stylesPretul depinde de cat de scurt sau cat de real arata contul:



Click to edit Master title styleCine creeaza Trojan-PSW? Top 10 tari:

• Click to edit Master text styles3% 3% 2%

China– Second level• Third level– Fourth level4%

3%3%

3% ChinaRussiaGermanyIndiaFourth level

» Fifth level

Russia; 12%

4%

IndiaTurkeyEgyptUS

China; 63%Russia; 12% US

UkraineMexicoFranceFrance





Si daca nu am bani?Si daca nu am bani?Nu-i nimic…


Click to edit Master title style“Nu am decat un calculator…”

• Click to edit Master text stylesSunt oferite servicii catre alti criminali informatici:



Click to edit Master title stylePuterea unui botnet




• Click to edit Master text styles– Second level

• Third level– Fourth levelVă mul umesc! Întrebări?– Fourth level

» Fifth levelVă mul umesc! Întrebări?

stefant@kaspersky [email protected]/stefant

Ștefan TănaseȘtefan TănaseSenior Security ResearcherGlobal Research and Analysis TeamKaspersky Lab


p y

AGORA Securitate – Bucuresti, Hotel Intercontinental, 14 Aprilie 2010

Documents

Cat valorezi?