Ransoming and clipping for illicit cryptocurrency gains Chetan Raghuprasad (Cisco Talos)

Author: Virus Bulletin - Bewertung: 0x - Views:1

Presented at the VB2023 conference in London, 4 - 6 October 2023. ↓ Slides: https://www.virusbulletin.com/uploads/pdf/conference/vb2023/slides/Slides-Ransoming-and-clipping-for-illicit-cryptocurrency-gains.pdf ↓ Paper: https://www.virusbulletin.com/uploads/pdf/conference/vb2023/papers/Ransoming-and-clipping-for-illicit-cryptocurrency-gains.pdf → Details: https://www.virusbulletin.com/conference/vb2023/abstracts/ransoming-and-clipping-illicit-cryptocurrency-gains/ ✪ PRESENTED BY ✪ • Chetan Raghuprasad (Cisco Talos) ✪ ABSTRACT ✪ The cyber threat landscape continuously evolves with the new techniques and malware employed by known and unknown threat actors across various competencies. Ongoing infringements and internal leaks amongst the ransomware groups and the availability of commodity malware for cheaper purchase in the dark market have led to the evolution of diverse groups of cybercriminals who may not require sophisticated skills to operate malicious campaigns. In this presentation, I will discuss a malicious campaign discovered by Cisco Talos. A less sophisticated threat actor targets victims to steal cryptocurrencies by deploying ransomware and clipper malware in their attacks. I will describe the attack campaign’s infection chain and initial infection vector. Then, diving into the specifics of how the ransomware and clipper malware function in the victim’s machine after having successfully been implanted, I will share recommendations for users and organizations to be meticulous about such threats and secure their environments.