Bestsellers in the Underground Economy - Measuring Malware Popularity by Forum

Presented at BSidesLV 2019, Aug. 6, 2019, 11:30 a.m. (25 minutes).

While you can patch against malware has been infecting your tech stack or targeting your competitors, what about malware that hasn't been in the news? This presentation will cover what malware and tools are popular among underground criminal forums based on prevalence in forum advertisement, how they differ between forums, and why understanding that difference matters.

Presenters:

• Winnona DeSombre
  Winnona DeSombre is an Asia Pacific threat intelligence researcher at Recorded Future, focusing on Chinese underground hacking communities and East Asian cyber espionage campaigns. She tracks trends in cybercriminal activity, analyses new malware and tooling, and improves East-Asian sourcing within Recorded Future. In recent years, Winnona spoke at the Forbes 30 under 30 summit, won the Harvard Belfer Center D3P Hackathon by constructing risk rule calculation software to combat social media influence campaigns, and was a semi-finalist in the Atlantic Council's Cyber 9/12 competition. She was also one of the youngest individuals featured in Threatcare's "Tribe of Hackers" book, containing career advice from some of the world's best information security professionals.

Links:

• https://www.youtube.com/watch?v=v4x6bL_8KMM

Similar Presentations:

• Black Hat USA 2010 / Malware Attribution: Tracking Cyber Spies and Digital Criminals
• ekoparty 14 (2018) / To Execute or Not to Execute. How to Build a Malware Execution Lab
• DerbyCon 3.0 All in the Family (2013) / The Malware Management Framework, a process you can use to find advanced malware. We found WinNTI with it!