Pirkka Palomäki, Kongres Biznes To Rozmowy,2009, NETIA

2. Cybercrime & Business
How do we fight this war?
Pirkka Palomäki
Chief Technology Officer
F-Secure Corporation

5. Operating system
Floppy Browsers
Lan Java
Email Adobe Flash
Web Adobe PDF reader
Quicktime
facebook, myspace, twitter, linkedin?

6. Acrobat

7. Flash

8. Case Darkmarket

13. Featuring
Mr. Adewale Taiwo
Featuring Mr. Cagatay Evyapan
aka "Cha0"

15. Case Mebroot

16. Case Mebroot – short introduction
The first complex MBR rootkit with malicious payload
Kernel-mode downloader and backdoor
Downloads PWS and banking Trojan components
Strengths of Mebroot:
No executable files on file system
No registry keys or standard launch points
No driver module in module list
Minimal memory footprint
Early execution during system startup
Stealth read/write disk operations
Stealth Anti-Removal protection
Totally generic, open malware platform (MAOS)

21. How do we work?

22. F-Secure Dashboard

23. Myth To Forget

24. Obsolete for
Hundreds of Thousands
of samples every day

25. Security Research Flow; The Critical Chain
Malware Detection Malware
Automatic Real-time
Samples / Engine Researchers &
Analysis delivery
Acquisition Technology Analysts

35. SMA Decisions – daily

36. thank you