Upload File

eicar wgii meeting, 26.11.2013 honigtopf mal anders: ein … · 2016-09-19 · mcafee: avoiding the...

  • Home
  • Documents
  • EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
45
Rainer Link Senior Threat Researcher Forward Looking Threat Research (FTR) TREND MICRO Deutschland GmbH [email protected] EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein (angebliches) Wasserwerk

Upload: others

Post on 29-May-2020

2 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

Rainer Link

Senior Threat ResearcherForward Looking Threat Research (FTR)TREND MICRO Deutschland [email protected]

EICAR WGII Meeting, 26.11.2013Honigtopf mal anders: ein (angebliches) Wasserwerk

Page 2: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 3: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 4: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

4

LATIN AMERICA

EUROPE

APAC

NORTH AMERICA

GLOBAL

Page 5: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 6: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 7: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 8: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 9: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 10: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 11: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 12: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 13: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 14: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 15: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 16: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 17: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 18: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

(Oder Bing)

Page 19: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 20: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 21: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 22: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 23: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 24: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 25: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 26: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 27: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 28: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 29: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 30: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 31: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 32: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 33: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 34: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 35: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 36: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

TO: CITYWORKS@<HOSTNAME OF OUR CITY>.COM

“ Hello sir, I am <name of city administrator> and would like the attached statistics filled out and sent back to me. Kindly send me the doc and also advise if you have questions. Look forward you hear from you soon

… Mr. <name of city administrator> ”

Page 37: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 38: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 39: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 40: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 41: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

Kurzer Exkurs: vom Wasserwerk zu Schiffen ...Automated Identification System (AIS)

41

Page 42: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

42

Page 43: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

AIS Video: http://www.youtube.com/watch?v=QObWQ14EtFA Text

http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
Page 44: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 45: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdfhttp://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf

AIS Video: http://www.youtube.com/watch?v=QObWQ14EtFA

Weitere Informationen

http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA

Vita Nova St. Petersburg, Russia Personnel development in YIT St. Petersburg Alexey Ustinov (Personnel and corporate affairs director) 26.11.2013 Kuopio

New AV-Comparatives Security Survey 2013 · 2016. 12. 10. · EICAR is the best-known overall, and especially in Europe (47.7%) and North America (46%). This may be because EICAR

APT - EICAR › files › eicar_wg2_2015... · Our motivation for APT detection Traditional solutions have limitations –Targeted attacks are hard to detect –Detection, containment

Growing old gracefully - 2013/Temadag...–Eddy current –Magnetic Stress measurement Growing Integrity Management tool box 26.11.2013 18 Information management in 21st century 26.11.2013

AMP for Endpoints SF-EICAR - Cisco · Version 5.4 Cisco AMP for Endpoints SF-EICAR 4 CHAPTER 2 SF-EICAR THE ATTACK The attack starts when the victim opens a PDF …

you May need on the trail. Instructions Navigate through five learning stations at various locations in the wetland using thig iPad and learn about how thig site treats water in

Selfness The best thing, what could happen to us: to understand ourselves → HEALTH Your health is your responsibility LifeStyle Medicine 26.11.2013, Belgrade

Timeout LOS ANGELES Find four cool culinary concepts under ...€¦ · the deal grab Of the cafés be it grain . With Of the al Of and who the in thig the Sibling Thig 1.010 four—or

FIIT STU, Bratislava 26.11.2013 Peter Šinkovič AGILE INTRO ...vranic/mps/p/p09-Agile_Intro_III.pdf · AGILE INTRO (SCRUM & MORE) FIIT STU, Bratislava 26.11.2013 ... SCRUM in 100

Fighting malware and spam CONTENTS IN THIS ISSUE · CONTENTS IN THIS ISSUE ISSN 1749-7027 Fighting malware and spam 2 COMMENT PWN2KILL, EICAR and AV: ... Electronique, Automatique

Recycling of mercury containing lamps in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013 Christof Delatter Association of Flemish Cities and Municipalities

Creation and Transmission of the Chi Med Srog Thig-libre

EICAR‘s TEST FILE HISTORY · PDF fileEICAR‘s TEST FILE HISTORY ... Roger Riordan, Paul Ducklin, Alan Solomon, Christoph Fischer etc ... creation of the EICAR test file by CARO

No Safety Without Security - EICAR · Threats come from a variety of sources, including intentionally malicious and unintentionally malignant. The goal of security therefore is to

Driving Waste Management towards Recycling Estonia’s experience 25-26.11.2013, Kiev TAIEX workshop Peeter Eek Waste Department, Ministry of the Environment

| Dr. Philipp v. Wrangell | ERASMUS STAFF TRAINING WEEK | 26.11.2013

2014 - ERA · Multi-annual Financial Framework 2014-2020 for which the economic perspective is demanding, with tight expenditure ... 6 Adopted version 26.11.2013 1. European policy

THE CASE FOR BINARY OPTIONS - forexforum.investor.bgforexforum.investor.bg/2013/downloads/Tradologic_FF_Investor_2013.pdf · 26.11.2013 · BINARY OPTIONS MARKET PRESENTATION 4 The

Приложение 1 к приказу от 26.11.2013 г. № 49/3 р ...adm-edu.spb.ru/sites/default/files/polozhenie_o_sisteme_oplaty_trud… · 1 Приложение 1 к приказу

THIG Wireframes

130 CONFIDENTIALfc95d419f4478b3b6e5f-3f71d0fe2b653c4f00f32175760e96e7.r87.cf1.rac… · vietnamese refugees wit: ... might 3e helpfu il managinn thig probles m eithe b applyiny r

JavaScript and VisualBasicScript Threats - EICAR · AJAX = Asynchronous JS and XML ... less and less used for web pages or inside applications ... Response page is built using request

Information campaigns and motivational principles in household waste management in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013 Christof Delatter Association

From ERASMUS „Intensive Programmes“ to ERASMUS+ „Strategic Partnerships“ Dr. Sabine Habermalz | 26.11.2013 ERASMUS Institutional Coordinator | International

EICAR 2011 presentation.pptstatic1.esetstatic.com/.../EICAR-2011-Presentation.pdf · 2018-07-26 · Clearly though, that’s a fallacy unless there really is no malware but Windows

Mercedes-Benz Accessories GmbH A Daimler Company Update - Genuine Mercedes-Benz accessories Christina Gousetis (MBA/ATP) 26.11.2013

Recycling of mercury containing lamps in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013

AVerify - EICAR · 2010-05-10 EICAR 2010 A philosophical note Information sharing is a good thing, in general –Security through obscurity never works See: Mifare (RFID), A5/1 (GSM),

Niklas wilhelmsson eparticipation-26.11.2013

Google@Croud Master Slides 26.11.2013

Peta regionalna konferencije o zdravstvenom, velnes i SPA turizmu, 26.11.2013., Beograd Tematska celina "Primeri dobre prakse klastera u regionu“ Klasteri

EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein ... · Philpott children were 'happy and looked after. court told as parents Sentence ... 010041 cac 2E4 0100M 1 F3zc WEBC2.Y21K

Small treatise about e-manipulation for honest peopleesec-lab.sogeti.com/static/publications/08-eicar-emanipulation.pdf · Small treatise about e-manipulation for honest ... Google

Formation of tariff policy of household waste management in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013 Christof Delatter Association of Flemish Cities

Microsoft Defender ATP on Virtual Desktop Infrastructure · test (which corresponds with the opening of the .bat file that copied the EICAR file), before tapering down to just above