~/talk

Modern Malvertising ...

Talkat AppSec California 2015 · on Monday, 2015-01-26· [security, web-platform]
links:none on file
slides:none on file

Breaks down actual findings: a measured top‑5 list shows monetization vectors dominate—fake branded updates, generic trojans and fake AV far outnumber exploit kits—then walks a 30‑minute, step‑by‑step reconstruction of a live malvertising campaign, mapping calls through a traffic distribution system into the Angler and Rig exploit kits, pointing to AWS‑hosted redirection infrastructure and measurable financial impact (Euro Grabber campaigns netting tens of millions). Demonstrates which tools detected each stage, how attribution is traced, and what remediation actually stops the chain.

AI-written summary · about

  1. 0:00Start
  2. 3:16Aaron Evans
  3. 6:44Mistaken Assumptions
  4. 21:34Big Exploit Kit
  5. 23:32Real-Time Bidding
  6. 32:43Traffic Distribution Systems
  7. 33:05Video Ad Banner
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.