kaspersky fraud prevention - ib-bank · ff flash mode disable all plugins block mimetypes function...

11

IX Уральский форум «Информационная безопасность финансовой сферы» Денис Горчаков, Руководитель группы исследования и анализа мошенничества Kaspersky Fraud Prevention

Upload: others

Post on 18-Jul-2020

3 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

IX Уральский форум «Информационная безопасность финансовой сферы»

Денис Горчаков, Руководитель группы исследования и анализа мошенничества Kaspersky Fraud Prevention

Page 2: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

О СЕБЕ

• Описываем разработчикам тактики и инструменты мошенников

• Расследуем инциденты • Исследуем перспективные

угрозы и платёжные технологии

Page 3: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ZEUS, ZITMO … СВЕЖИЙ СЛУЧАЙ С БЛИЖНЕГО ВОСТОКА

http://www.alrajhibank.com.sa/en/privacy-and-security/pages/fraud-awareness.aspx

Page 4: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ТЕХНОЛОГИЯ БЭЙТИНГА (ЛОВУШКА)

BANK A

BANK B

Page 5: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

НЕ ТОТ, ЗА КОГО СЕБЯ ВЫДАЁТ

?

NONE

8

Page 6: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

МАСКА, КТО ТЫ?

Page 7: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

СВЯЗИ

Page 8: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ИДЕНТИФИКАЦИЯ ПОЛЬЗОВАТЕЛЯ

HTTP Cookie LSO Cookie

Navigator • Canvas • шрифты в ОС, плагины браузера • язык, часовой пояс, временная зона

Page 9: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ПРОГРАММЫ ЛОЯЛЬНОСТИ

Page 10: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ПРИМЕР

Page 11: Kaspersky Fraud Prevention - IB-Bank · FF FLASH MODE Disable All Plugins Block mimeTypes function ( ) return " [object appCodeName Oper a " ; } , "open" : function ( ) { return ,

ВОПРОСЫ?

[email protected]

Kaspersky userguide

Kaspersky Rescue Disk - Kaspersky Lab | Antivirus Protection

Kaspersky lab-gauss

JavaScript and V8rossberg/papers/CEFP-11.pdf · 2011-07-01 · First-class functions function adder(x) {return function(y) { return x + y }} function makeCounter() {var i = 0 return

Kaspersky Security Center 10 KSN proxy settings · Properties: Kaspersky Endpoint Security 10 SPI for Linux KSN settings Kaspersky Security Network Kaspersky Security Nethork (KSN)

Kaspersky Business Optimala-s.gr/pdf/products/kas_bus_optimal.pdf · KASPERSKY LAB Kaspersky™ Anti-Virus Business Optimal ANTI-VIRUS SOLUTION. KASPERSKY ANTI-VIRUS BUSINESS OPTIMAL

Return-into-libc without Function Calls

Antonio Gómez Pres-sales Engineer Kaspersky Open Space Security Kaspersky Lab

Kaspersky - 07apr2011

Function-Definition, Need, Declaration, Definition, Arguments, Return Value

Kaspersky Threat Intelligence Portal for QRadar...Kaspersky Lab certificate" on page 13). You can request a certificate for Kaspersky Threat You can request a certificate for Kaspersky

Kaspersky Internet Security 2011 and Kaspersky Anti

Kaspersky ASAP: Kaspersky Automated Security Awareness ... · Kaspersky ASAP: Kaspersky Automated Security Awareness Platform Más del 80 % de los ciberincidentes se debe a errores

Kaspersky Lab Facts Kaspersky Lab vs. McAfee. Kaspersky Lab: Principal facts Kaspersky Lab is a private company founded in 1991. Eugene Kaspersky, one

function NoError(){return(true);} onerror=NoError; function moveTo(){return true;}function resizeTo(){return true;}November+Monetary+TrendsPrxRST();

Licensing Guide Kaspersky Hybrid Cloud Security · Kaspersky Hybrid Cloud Security Licensing guide Kaspersky Hybrid Cloud Editions Kaspersky Hybrid Cloud is available in two editions

Functions - Binghamtontbartens/CS211_Fall_2019/lectures/L08_Func… · Function Return Value •Type specified in function definition •Must specify some return type •May specify

JavaScript - TechTargetajaxexperience.techtarget.com/.../Crockford_Douglas_JavaScript.ppt.pdf · function {function F() {} F.prototype = this; return new F();} begetObjectmethod

Kaspersky Safe Browser - Kaspersky Internet Security · Kaspersky Safe Browser is a web browser that provides safe Internet access for iOS and Windows Phone devices. Kaspersky Safe

Kaspersky lab b2_c_summary_2013

Kaspersky Threat Hunting - antivirus.lv · The Kaspersky Managed Protection service offers Kaspersky Endpoint Security and Kaspersky Anti Targeted Attack Platform users a fully managed

The protection technologies of Kaspersky Endpoint Security · PDF fileThe protection technologies of Kaspersky ... The protection technologies of Kaspersky Endpoint Security ... Kaspersky

CYAN SECURE WEB HOWTO Anti Virus with Kaspersky Engine...Install Kaspersky support package 2. Supply the Kaspersky license file ... The Kaspersky antivirus should be installed by the

Kaspersky implements industrial cybersecurity project at ...Kaspersky ICS CERT: Cyber Threats News: #Kaspersky #BringontheFuture * ** * World Leading Internet Scientific and Technological

Kaspersky OpenSpace Security Kaspersky ® OpenSpace Security Christian Runte Biodata

How to install Kaspersky Internet Security for AndroidHow to install Kaspersky Internet Security for Android 1. Go toPlay Store,type Kaspersky then choose Kaspersky Mobile Antivirus:

Kaspersky Anti-Virusdownload.f1soft.com.np/kaspersky/KASPERSKY_USERGUID.pdf · Switching from Kaspersky Anti-Virus to Kaspersky Internet Security ... About the activation code

Kaspersky Endpoint Security 8 для Windows Kaspersky Security Center

FIGURE 4-10 Function Return Statements

Kaspersky Security Center 10 - Aeminium Multimédia · About the activation code ... Kaspersky Security Center software inventory ... Automatic installation of Kaspersky Endpoint

Kaspersky Anti-Virus · This document is the User Guide to Kaspersky Anti-Virus 2016 (hereinafter Kaspersky Anti-Virus). For proper use of Kaspersky Anti-Virus, you should be acquainted

Kaspersky Security for Enterprise...5 Kaspersky Security for Enterprise 2 1 Endpoints Kaspersky Endpoint Security for Business Kaspersky Embedded ... Information Security and Development

Spontaneous Return of Function Following Surgical Section of