Cyber of things 2.0
1 like519 views
The document discusses trends, tactics, and perspectives related to cybercrime investigations. It outlines the top cybercrime threats as financial fraud, social media-related crimes, and other online scams. The document also discusses popular cybercrime tactics like social engineering and anonymity through cryptocurrency. It emphasizes the need for government coordination, cybersecurity preparedness, and proactive threat hunting to effectively address evolving cybercrime.
Cyber of things 2.0
- 1. -Team CRCIDF Trends Tactics & Investigation Perspective
- 2. DISCLAIMER The views / opinions / assumptions expressed for educational & research purposes only. Do not attempt to violate the law with anything contained here. Neither the author of this material, nor anyone else affiliated in any way, is liable for your actions. The purpose of this presentation is to share what is cyber happening trends and what is possible... CoT : CYBER OF THINGS
- 3. We live in the digital age Criminals do too What are the top cyber crime threats ? CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE
- 4. CYBER INCIDENTS CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE C Factor and all are interrelated CYBER CRIME CYBER SECURITY CYBER TERRORISM
- 5. CYBER RISK RANKING BY SECTOR CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE GOVERNMENT MANUFACTURING BANKING FINANCIAL SERVICES & MOBILE MONEY RETAIL STRATEGIC & PUBLIC ENTERPRISES. PROFESSIONAL SERVICES HOSPITALITY INSURANCE TELECOMMUNICATIONS *As per African (Kenya) Region
- 6. Top 5 cyber crime incidents from India perimeter (Updated Oct 2020) Flashback Pointers CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Payment Fraud, Phishing, Vishing, Smishing, Wallet related, Card-not-present (CNP) fraud , UPI, QR-Code, PayTM, OLX, Cashback related etc. 50 Percent (1-3) Financial Frauds Cyber Bullying, Online Harassment, Fake profile account, Online Scams, CP, CSAM, Money asking case, Revenge porn, Fake news, dating app through fake account black mail, provocative speech, Religion base etc. 25 percent (4) Online social media related Job frauds, Matrimonial, MLM, Cheating, Malware hacking related etc. 25 Percent (5) Other Cyber Crimes
- 7. TRENDS & TACTICS CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Top State/UTs with the reported incidents Delhi, Maharashtra, Gujarat, Uttar Pradesh, Karnataka… i. Social Engineering: Hub Jamtara, Mewat, Mahipalpur, 50% of the cybercrimes in India are traced back to this sleepy town ii. Trending Theme: Couple Challenge, don’t know the Cons, Deep Fake, Extortion, Blackmailing case iii. Spywares: No OTP required of phone is hijacked iv. Anonymity: Criminals (Still) Love Cryptocurrency v. Banking Trojan Ursnif, Zeus, Emotet, Dridex etc. vi. Bulletproof hosting (BPH) BPH refers to a type of hosting or hosting provider that earns its money by consciously accepting perpetrators of crime as part of its clientele, offering them technical infrastructure resilient to law enforcement disruption or takedown vii. Modular Malware Ransomware viii. ...
- 8. RANSOMWARE Now Crypto Hackers Mindset : Too much risk......but the target is too sweet CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE
- 9. REQUIRED ACTION Govt. already having funds, schemes, various dedicated divisions/unit/portal to tackle such crimes/issues Capacity building: Detailed training as Ramayana can't be finished in 1 hour Digital literacy: Cyber Awareness such as netiquette, Modus Operand based PPT factor with proper effective coordination CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE
- 10. CYBER SECURITY PREPAREDNESS CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE LEGALMEASURES • Measures the legal framework of a country that streamlines basic response mechanisms to breaching of cyber law TECHNICAL • Measures the adequacy of technical measures and the strength of capabilities based on the number of existing technical institutions and frameworks dealing with cybersecurity ORGANISATIONAL • Measures the organisational strategy of a countries cybersecurity imitative. This is based on the number of institutions and strategies organizing cybersecurity development at national level CAPACITYBUILDING • Measures the awareness campaign and the availability of resources for each country. ( Includes the existence of research and development education and training programs and certified professionals and public sector agencies. COOPERATION • Measures the active engagement of different sectors and stakeholders in preventing threats and combating cyber-attacks.
- 11. Don't believe marketing hype regarding Cyber Crime Safety "oh, we spent $$$ in $Vendor product, so we are safe" Any "tool", regardless of the price, is still a "tool“ Effective Awareness appreciable CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Take a Break
- 12. Ad CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Another Buzz
- 13. OSINT ≠ Actionable Intelligence What exactly : OSINF Open Source Information Sentiments, Statistics, Trends So what's required Proactive Threat Hunting required : Data and Patience Understand the Threat and Actor and what to hunt Defacement Days gone… APT , Malware, Ransomware, Honeypots, Bots, Watering Hole etc. CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Where We Stand 💳 38 % Crypto Miner's 👾 29 % Botnet 📲 27 % Mobile 🏧 18 % Banking 🧾 18 % Info stealer 🧾 7 % Ransomware Src 👉 Check Point Cyber Security Report 2020
- 14. Ad CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE
- 15. Ad CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Aim
- 16. Strategic: Broader trends typically meant for a non technical audience Tactical: Outlines of tactics, techniques, and procedures (TTP) of threat actors for a more technical audience Operational: Technical details about specific attacks and campaigns i. Hypothesis Driven: Data Leak/Breach, IOC, TTPS ii. Analytics and Machine Learning : Data set, Signatures, Anomalies, Historical repo, UEBA, SOAR etc. iii. Manual Interventions: Customised sensors, crawlers, parsers iv. Human Intelligence always Win : Expertise, SME, Coordination agencies etc. CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Strategy
- 17. CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE SOCMINT • Disseminate to Concern • Need to add Output COTS Twitter iMessengers Maltego Etc. Processing There are three main steps in analysing social media: • Data identification, • Data analysis, and • Information interpretation. Gather actionable insights in raw form concerning to Subject, etc. Input
- 18. i. OSINT Tools and Framework : Domain Based, Searching, Clustering, Grouping etc. ii. OSINT Services websites: osint, start.me, midasearch, toddington, osintgeek, intel technique etc. iii. Commercial vendors: Feeds, Alerts iv. Government off-the-shelf Tools : In-House, Integrated APIs and Data Lake v. Common Sense CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE Tools
- 20. Sit back and enjoy the show... or Let’s Start Crime free CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE
- 21. References • Cyber Threat Intelligence Command Centre - SC3 • Github • SANS Mail: D3pak@protonmail.com For more: https://d3pakblog.wordpress.com CoT : CYBER OF THINGS D3PAK KUMAR DIGITAL FORENSICS | CYBER INTELLIGENCE