your online personal privacy protection

Online Personal Privacy Protection 2011 IT SecurityModern Cyber Warfare and YouPresented by : 

Online Personal Privacy Protection 2011 IT SecurityModern Cyber Warfare and YouPresented by Ccure IT Copyright 2010 info@ccure.it

Introduction : 

Introduction We believe it is your RIGHT to know what we are going to show you in this presentation. We will give you just a slight preview of what actually happens inside the DARK Cyber Online World every time we connect our computers to the internet. We want you to see how exposed we are to unknown stranger’s and Companies who are barging in our online privacy without our knowledge and permission every time we go online. We will demonstrate and show you how easy it is for those people to bypass all our current Anti Virus Software`s and Firewalls. We have proof that more needs to be done because your current security measures are NOT enough and your online privacy and identity is exposed to multiple threats and vulnerabilities even right now. We will show you how and why your computer can be used in the Modern Cyber Warfare by hackers and cyber criminals while you are still unaware. Ccure IT Copyright 2010 info@ccure.it

Botnets : 

Botnets A network of computers infected with a particular Trojan/virus is a Botnet. Although the owners of these infected computers are unaware of it, their machines are automatically set up to forward transmissions (including spam or viruses) to other computers on the Internet. These computers that are thus controlled are known as “zombies” and are key tools in cyber warfare. According to a recent survey in India as of May 2010, over two million computers in India have been taken over by an external controller and are available to carry out attacks, including acts of cyber-terrorism. Most computers compromised in this way are home-based. According to a report from Russian-based Kaspersky Labs, Botnets not spam, viruses, or worms -- currently pose the biggest threat to the Internet. A recent report from Symantec also came to a similar conclusion. Ccure IT Copyright 2010 info@ccure.it

How do they make Money? Why is it a billion dollar Industry? : 

How do they make Money? Why is it a billion dollar Industry? Ccure IT Copyright 2010 info@ccure.it

Risks to Internet privacy : 

Risks to Internet privacy In today’s technological world, millions of individuals are subject to privacy threats. Companies are hired not only to watch what you visit online, but to infiltrate the information and send advertising based on your browsing history. Its not just those company’s but even individuals are spreading spyware/malware to thousands of innocent victims all across the globe every minute… because it’s a billion $$$ underground industry right now as we speak. It doesn’t matter if you have the most latest firewalls deployed on your network. It doesn’t matter if you have the most current and updated antivirus in the world. The chances of your online privacy and identity being invaded are 100%. Hacker tactics and techniques are constantly evolving. Hackers are continually developing new attack tools and hacking strategies to gain malicious access to systems and attack your networks, making it difficult for organizations to develop and implement the proper polices and procedures necessary to prevent these hacker attacks. Ccure IT Copyright 2010 info@ccure.it

Expert: cyber criminals in Russia earn $ 1 billion a year “according to recent news report”   September 15, 2010 : 

Expert: cyber criminals in Russia earn $ 1 billion a year “according to recent news report”   September 15, 2010 The main market turnover accounted for cybercrime is… Botnets (spam, identity theft – 40%) DDoS-attack to Internet resources (20%). Anyone can hire these below mentioned services easily from hackers and botnet operators. Infection with "viruses" 1000 personal computers in Russia now costs 20 dollars DDoS-attack. A powerful and well-designed bot network ranges from 200-500 Euros. Development of Trojan programs – from 980 to 4900 dollars Accounts of electronic payment systems to "hacker" forums are sold for as low as $ 6 The minimum cost of breaking into a website is $ 50 Credit card numbers with PIN codes are sold from 490 dollars. Ccure IT Copyright 2010 info@ccure.it

Our Concerns? : 

Our Concerns? Ccure IT Copyright 2010 info@ccure.it

Slide 8: 

A botnet operator sends out viruses or trojan horses, infecting ordinary users' computers A spammer purchases the services of the botnet from the operator The spammer provides the spam messages to the bot operator, who instructs the compromised machines via the C&C server, causing them to send out spam messages/emails Ccure IT Copyright 2010 info@ccure.it Once infected, the victim’s machine acts as a “zombie” and connects back to a Command & Control Server of the hacker and waits for further instructions. So how does this work?

Operations that could be performed by a hacker on a target computer System once a Trojan Horse has been installed include: : 

Operations that could be performed by a hacker on a target computer System once a Trojan Horse has been installed include: Use of the machine as part of a botnet (e.g. to perform automated spamming or to distribute Denial-of-service attacks) Data theft (e.g. retrieving passwords or credit card information) Installation of software, including third-party malware Downloading or uploading of files on the user's computer Modification or deletion of files Keystroke logging Watching the user's screen Wasting the computer's storage space Watching the user’s webcam and listening and or record audio through user`s microphone. Ccure IT Copyright 2010 info@ccure.it

Who is at Risk? : 

Who is at Risk? Ccure IT Copyright 2010 info@ccure.it Home users, Office users, Schools, Colleges, Universities Banks and Telecom, Corporate Multinational Companies Army/Military, Air force, Navy, Police and Government Computers

Top 5 Reasons Why You would think “I’m Safe” : 

Ccure IT Copyright 2010 info@ccure.it Top 5 Reasons Why You would think “I’m Safe” There’s nothing important on my computer 4. My Corporate firewall will protect me 5. I have a Mac/Unix computer. They don’t get viruses 3. I checked and I didn’t see anything 2. My A/V program says I dont have a virus

I have a Mac/Unix computer. They don’t get viruses : 

I have a Mac/Unix computer. They don’t get viruses #1 platform for Command & Control Servers – Unix Mac Trojan aimed at taking money from Mac Users The Trojan comes disguised as a video-decoding plug-in that users are told they must install to watch free porn clips. Instead, the software burrows into the operating system and diverts some of the victim's future web surfing to sites under the attacker's control. It's the professional attack on Macs that the security community has long predicted, according to Dave Marcus, security research manager at McAfee's Avert Lab, who said it was "written by people who know how to write malware." http://www.wired.com/politics/security/news/2007/11/mac_trojan Ccure IT Copyright 2010 info@ccure.it

My firewall will save me? : 

My firewall will save me? Your PC sends a connection automatically to the hacker’s computer the moment you connect to the internet. IF you can browse google.com while sitting behind your firewall, the hacker can browse your computer in the exact same way… Ccure IT Copyright 2010 info@ccure.it

I checked and I didn’t see anything! : 

I checked and I didn’t see anything! These new Malwares/Viruses/Trojans are smart. They inject malicious code in our computer’s running processes like Firefox.exe Explorer.exe Ccure IT Copyright 2010 info@ccure.it

A/V Program said no virus! : 

A/V Program said no virus! These Trojans/Viruses are encrypted and well hidden. Antivirus software's let them bypass easily. We should also keep in mind that every new Virus/Trojan which is developed is first TESTED against all the current antivirus software's so Of course you’re A/V program will NOT detect it even with the updated virus signature database. We have a demo in which we will show you how easily the new Malware and Trojans bypass every known antivirus which we trust. Ccure IT Copyright 2010 info@ccure.it

I have nothing important on my computer?I don’t do anything Important online? : 

Ccure IT Copyright 2010 info@ccure.it I have nothing important on my computer?I don’t do anything Important online? Your Computer’s space, network bandwidth & processing power can be used against your own Government and Local Networks as your computer can become or probably already is a part of some Botnet. All your online contacts are vulnerable because of you Your computer can also be used for cyber crime/terrorism Your access Online Banking? Your email? used for spamming and false ID theft Your identity Online fraud can be committed using your Online Identity and Using Your Computer. For example Online shopping.

Real Threat is from within the network : 

Real Threat is from within the network Many current real-world computer security experts focus on external threats only and generally treat the end user computer system as a trusted machine just because it is behind firewalls and routers with current updated antivirus systems intact. However Some knowledgeable and practical security specialists consider this to be a disastrous mistake and point out that this distinction is the cause of much of the insecurity of current computer network systems all over the world. The threat is from within the network mostly and once an attacker has subverted even a single machine on the network, he or she usually has access to most or all of the devices/computers on the victim network. Ccure IT Copyright 2010 info@ccure.it

Further info? : 

Further info? Ccure IT Copyright 2010 info@ccure.it Ateeq Khan Network Security Specialist www.ccure.it ateeq@ccure.it +923009289518