Cyber crime v3

Editor's Notes

• #8: A Semi-skilled Ukrainian Hacker can make 400x their normal income by switching to a business model that is illegal (in the US)
• #9: How do we get that payload on a machine? Exploit (like Flash, or Java, or Windows) Use a service to install it (via Zeus or Angler?)
• #11: The cybercrime network is expanding, strengthening, and, increasingly, operating like any legitimate, sophisticated business network. Today’s cybercriminal hierarchy is like a pyramid. At the bottom are the nontechnical opportunists and “crimeware-as-a-service” users who want to make money, a statement, or both with their campaigns. In the middle are the resellers and infrastructure maintainers—the “middlemen.” At the top are the technical innovators—the major players who law enforcement seeks most, but struggles to find. Crimeware’s development and distribution is highly organized and controlled by criminal groups that have formalized and implemented business models to automate cybercrime. Just as the software industry has spawned a business model in reselling, installing, and maintaining legitimate code, the malware industry has spawned distribution and support networks to assist criminals in successful malware usage. Developers of crimeware profit from the sale or lease of the malware to third parties who then use it to perpetrate identity theft and account fraud. When individual groups of criminals coordinate their efforts, and the product is Crimeware as a Service (CAAS).
• #15: Alternative transition – recommend using additional colors for multiple transition slides
• #17: Securing cyberspace is shared responsibility - collecting, analyzing & disseminating cyber threat intel” - FBI
• #20: Ponemon stats around timeliness expectations
• #24: https://www.isc2.org/uploadedfiles/(isc)2_public_content/certification_programs/csslp/csslp-wp-5.pdf
• #26: SANS STH.EndUser Security Awareness Training