Lessons Learned Hunting IoT Malware - Olivier Bilodeau at 44CON 2017

Описание: Lessons Learned Hunting IoT Malware - Presented by: Olivier Bilodeau at 44CON 2017

Permeating the entire spectrum of computing devices, malware can be found anywhere code is executed. Embedded devices, of which many are a part of the Internet of Things (IoT), are no exception. With their proliferation, a new strain of malware and tactics have emerged. This presentation will discuss our lessons learned from reverse-engineering and hunting these threats.

During our session, we will explain the difficulty in collecting malware samples and why operating honeypots is an absolute requirement. We will study some honeypot designs and will propose an IoT honeypot architecture comprising several components like full packet capture, a man-in-the-middle framework and an emulator.

Additionally, reverse-engineering problems and practical solutions specific to embedded systems will be demonstrated. Finally, we will explore three real-world cases of embedded malware. First, Linux/Moose, a stealthy botnet who monetizes its activities by selling fraudulent followers on Instagram, Twitter, YouTube and other social networks. Second, a singular ELF binary of the MIPS architecture which serves as a dropper. Third, LizardSquad’s LizardStresser DDoS malware known as Linux/Gafgyt. Attendees will leave this session better equipped to hunt this next generation of malware using primarily open source tools.

For more from 44CON and tickets visit 44CON Website: https://44con.com

--=== Contact ===--
YouTube:    / 44contv  
Website: https://44con.com
Twitter:   / 44con  
LinkedIn:   / 44con-3886577  
Facebook:   / 44con  

--=== Music Credits ===--
Island - by MBB:   / mbbofficial   (  / mbbmusic  )
Grind - by Andrew Huang - YouTube Music Library