Twarfing: Malicious Tweets
•Als PPT, PDF herunterladen•
3 gefällt mir•1,746 views
The document summarizes a presentation given at the Virus Bulletin 2009 conference about detecting malware on Twitter. It discusses how Twitter works and notable malware incidents that have spread on the platform. It then describes the architectures of two systems - Krab Krawler from Kaspersky Lab and Red Twarf from Trend Micro - that analyze URLs from Twitter to detect malicious links and monitor for new attack patterns.
![Click to edit Master title style ,[object Object],[object Object],[object Object],[object Object],[object Object],June 10 th , 2009 Event details (title, place) Costin G. Raiu Kaspersky Lab Virus Bulletin 2009 – September 24 th , Geneva Morton Swimmer Trend Micro Twarfing: Malicious tweets](https://image.slidesharecdn.com/crmsvb09-090925165928-phpapp01/85/Twarfing-Malicious-Tweets-1-320.jpg)
![Thanks to: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],June 10 th , 2009 Event details (title, place)](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Twarfing: Malicious Tweets
Ähnlich wie Twarfing: Malicious Tweets (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Twarfing: Malicious Tweets
- 12. Most popular URL shortening services Default URL shortener on Twitter since May 2009
- 13. Malware on Twitter June 10 th , 2009 Event details (title, place) August 2008
- 19. Twitter and Google SB API June 10 th , 2009 Event details (title, place)
- 22. A bit about ‘bit.ly’ / ‘j.mp’ June 10 th , 2009 Event details (title, place)
- 23. Our Robot(s) – Krab Krawler June 10 th , 2009 Event details (title, place)
- 25. Krab Krawler: Architecture June 10 th , 2009 Event details (title, place)
- 26. New unique URLs per day June 10 th , 2009 Event details (title, place)
- 27. Malware we found so far June 10 th , 2009 Event details (title, place)
- 29. Most popular URL on Twitter during Aug, Sep ‘09 June 10 th , 2009 Event details (title, place)
- 30. Our Robot(s) – Red Twarf June 10 th , 2009 Event details (title, place)
- 32. June 10 th , 2009 Event details (title, place) WhiteTwarf – the exploratorium Twitter Tweet processing WT-Redirector Analysis Redirectors and Shorteners Domain reputations RDF Store Shortener API HTTP request SPARQL Queries Attacks, Malicious users, etc Text Sigs URLs RDF Converter URL processing Tweets
- 37. Matching graphs June 10 th , 2009 Event details (title, place) posts posts tw:hasURL tw:hasURL drs:hasFQDN drs:rating posts posts tw:hasURL tw:hasURL drs:hasFQDN drs:rating mal http://mal.com/evil.exe tweet/1234 mal.com malicous http://unk.com/what.exe tweet/5678 ?m ?u1 ?t1 ?f malicous ?u2 ?t2
- 39. Matching Graphs June 10 th , 2009 Event details (title, place) posts posts posts posts hasURL hasURL hasURL hasURL textSig textSig textSig textSig iceman tweet/1001 thislinkiscool http://cool.com/ice.html notniceman tweet/1005 http://c00l.com/ice.exe ?u1 ?t1 ?s ?u1 ?mu ?t2 ?u2
Hinweis der Redaktion
- First malware link as far as we can determine was posted to Twitter in August 2008 It was a link to a website that was trying to distribute a banking trojan through social engineering tricks