Look Who it Was Random video

Modern Malvertising ... - Arian Evans & others - OWASP AppSec California 2015

720 views · Published 5 May 2015 · 55:08 · Indexed 30 October 2026

Channel: OWASP Foundation · 2015 · Science & Technology

Watch on YouTube

AppSec California 2015 - Day 1, Track 4, Slot 3

Title

Modern Malvertising and Malware web-based exploit campaigns

Abstract

The purpose of this presentation will be to introduce the audience to new techniques attackers are using to target users of web applications for exploitation.

The first part of this presentation will be an introduction to the modern Malware landscape, with a breakdown of the top 5 types of malware being actively used in campaigns to target end users of web applications. Of interest, though perhaps unsurprising – the top three are not what we traditionally think of as “malware” in the sense of exploitative code or remote backdoors – but aimed at direct monetization of the user.

The second part of this presentation will be a technical walkthrough a real-world modern malvertising & malware campaign, and break down each step of the attack, and each distribution & obfuscation layer. This walkthrough will be the bulk of the presentation (30 minutes), leaving time for Q & A at the end.

Time permitting, we may provide more examples of modern campaigns/malware.

Bio

Arian Evans is a recognized expert in information and application security, software development, systems architecture and financial services. He previously ran operations and product strategy for
WhiteHat Security and built the company’s world-renowned Threat Research Center. In addition to managing the global application security practice for consulting firm FishNet Security, Arian has worked on global security projects for the Center for Internet Security, NIST, the FBI, and the U.S. Secret Service. As VP of Product Strategy, Arian is responsible for ensuring RIskIQ technology enables enterprises to accurately visualize their enterprise beyond the firewall and actionably detect and respond to threats to their brand and customers. In this role he draws upon his previous 12 years in creating software solutions and methodologies for discovering and managing application security across the enterprise, and throughout the SDLC.

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel