Emerging Threats in Cybersecurity: Post-Motown Analysis - BSides Detroit 2016

Explore emerging threats in cybersecurity through this 45-minute conference talk from BSides Detroit 2016. Delve into the concept of post-Motown threats, examining examples and detection challenges. Analyze Angler ASN and potential revenue streams. Discover new URL structures and two-stage delivery methods. Investigate the fallout and consequences of these threats. Learn about SAMSM, a ransomware twist, and efforts to combat cybercrime. Examine attempts to increase legitimacy in malicious activities, including mass email campaigns. Understand techniques for exfiltrating data through DNS, modeling data, identifying anomalies, and active exfiltration methods.

Intro
THE CONCEPT
EXAMPLE
Overview
Detection Challenges
Angler ASN Analysis
Potential Revenue
NEW URL STRUCTURE
NEW: 2 STAGE DELIVERY STAGE 2
ACTION SUMMARY
ANGLER SUMMARY
The Fallout
Conclusion
SAMSM - A RANSOMWARE TWIST
CONTINUING THE GOOD FIGHT
Trying To Increase Legitimacy
137,731 emails in 4 days
EXFILTRATING DATA BY DNS
MODEL DATA
IDENTIFY ANOMALIES
ACTIVE EXFILTRATION