More details from FBI Deputy Assistant Director Steven Chabinsky’s keynote at FOSE. Chabinsky described several sophisticated attributes about the cybercrime underworld:

1. Some groups offer 7X24 operations, tech support, encrypted servers, and bulletproof networks.
2. Many times, cybercriminals rotate upstream network providers to protect themselves from law enforcement.
3. Security technicians constantly read about software vulnerabilities, vendor software bulletins, and security-centric web sites. The goal? Develop malware based upon product shortcomings, published vulnerabilities, or delayed patching cycles.
4. Behind their veil of Internet anonymity, cybercriminals look for targets of opportunity. Chabinsky compared it to a thief walking down the street and jiggling every door knob until he or she finds one left open.
5. Hackers who discover a vulnerable system often get a finder’s fee.
6. Many cybercriminals actually patch systems once they compromise them. Why? Once they establish a foothold, the goal is to keep other competitors out.
7. The bad guys are actually in the software business and protect their intellectual property. For example, Zeus can generate a hardened ID that acts as a software license. Basic packages cost $3,000 to $4,000. More advanced copies that include development support can be purchased for $10k.

Are you scared yet?

Read more of Jon’s blog entries at Insecure About Security.

• Share