OWASP Anti-Malware Project - Awareness Program - Revision history

Gfedon: /* From user infection to cash out */

2012-02-02T00:22:17Z

‎From user infection to cash out

2012-01-30T13:48:03Z

‎Containing the number of infected customers

2012-01-30T08:54:53Z

‎Unhide the Infection

2012-01-30T08:17:31Z

‎Against Cashing Out

2012-01-27T14:54:40Z

‎Actions to take for mitigating the Malware Attack Process

2012-01-27T14:52:39Z

‎Actions to take for mitigating the Malware Attack Process

2012-01-03T16:49:38Z

‎Evaluate your organization

2012-01-03T16:47:15Z

‎Actions to take for mitigating the Malware Attack Process

2012-01-03T16:42:59Z

‎What is Banking Malware

2012-01-03T16:41:38Z

‎General strategy

← Older revision		Revision as of 00:22, 2 February 2012
Line 12:		Line 12:

	This is a chain of required steps. Attackers need to perform successfully each of these for turning the attack into a monetary gain. For this reason the process can be reasonably stopped at any level. As in other cases a defense in depth approach is suggested to be effective against the weakest link of each part of the attack.		This is a chain of required steps. Attackers need to perform successfully each of these for turning the attack into a monetary gain. For this reason the process can be reasonably stopped at any level. As in other cases a defense in depth approach is suggested to be effective against the weakest link of each part of the attack.
		+
		+	Interesting Resources for further reading:
		+	* [http://www.youtube.com/watch?v=_2K8kRSlJXw '''MULTIDISCIPLINARY BANK ATTACKS, Gunter Ollman''']
		+

	==== Infection of clients and pcs ====		==== Infection of clients and pcs ====

@@ Line 54: / Line 54: @@
 * Awareness (e.g. Remember to the users about Antivirus programs)
 * Check for software updates and potentially exposed customers (e.g. Plugin Update)
 ==== Unhide the Infection ====

@@ Line 58: / Line 58: @@
 * Tell to your customers about the infections
 * Use systems for detecting compromised customers
-* Have in place a security response process
+* Have in place a Malware response process
 ==== Counterfeat the Stealing of Auth credentials ====

@@ Line 77: / Line 77: @@
 ==== Against Cashing Out ====
 * Mule accounts monitoring
 * Monitor and correlate sources for any disposal operation
 == Evaluate your organization ==
 Your organization can be evaluated along the adoption of the countereasures described above and on the effort to mitigate each malware attack step

@@ Line 53: / Line 53: @@
 ==== Containing the number of infected customers ====
 * Awareness (e.g. Remember to the users about Antivirus programs)
-* Check for software updates and potentially exposed customers
+* Check for software updates and potentially exposed customers (e.g. Plugin Update)
 ==== Unhide the Infection ====
 * Tell to your customers about the infections
-* Use systems for detecting compromised clients
+* Use systems for detecting compromised customers
-* Have in place a security response process to assist customers
+* Have in place a security response process
 ==== Counterfeat the Stealing of Auth credentials ====
 * Resilient Authentication
-* Inform the user about their own operations (e.g. SMS with Token and Transaction details)
+* Invest in user Informative (e.g. SMS with Token and Transaction details)
-* Multi factor and Multi channel
+* Multi factor and Multi channel authentication
 ==== Against the Remote Storaging of Auth Credentials ====

← Older revision		Revision as of 16:49, 3 January 2012
Line 77:		Line 77:

	== Evaluate your organization ==		== Evaluate your organization ==
		+	Your organization can be evaluated along the adoption of the countereasures described above and on the effort to mitigate each malware attack step

@@ Line 1: / Line 1: @@
 == Introduction ==
 === What is Banking Malware ===
 === How Banking malware deals with Web Application Security ===

@@ Line 43: / Line 43: @@
 === General strategy ===
-Narrowing the attack surface
+* Narrowing the attack surface
-Identification
+* Identification
-Blocking
+* Blocking
-Recovering
+* Recovering
 === Actions to take for mitigating the Malware Attack Process ===