Upload File

eicar wgii meeting, 26.11.2013 honigtopf mal anders: ein … · 2016-09-19 · mcafee: avoiding the...

  • Home
  • Documents
  • EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
45
Rainer Link Senior Threat Researcher Forward Looking Threat Research (FTR) TREND MICRO Deutschland GmbH [email protected] EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein (angebliches) Wasserwerk

Upload: others

Post on 29-May-2020

2 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

Rainer Link

Senior Threat ResearcherForward Looking Threat Research (FTR)TREND MICRO Deutschland [email protected]

EICAR WGII Meeting, 26.11.2013Honigtopf mal anders: ein (angebliches) Wasserwerk

Page 2: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 3: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 4: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

4

LATIN AMERICA

EUROPE

APAC

NORTH AMERICA

GLOBAL

Page 5: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 6: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 7: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 8: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 9: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 10: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 11: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 12: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 13: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 14: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 15: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 16: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 17: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 18: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

(Oder Bing)

Page 19: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 20: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 21: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 22: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 23: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 24: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 25: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 26: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 27: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 28: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 29: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 30: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 31: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 32: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 33: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 34: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 35: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 36: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

TO: CITYWORKS@<HOSTNAME OF OUR CITY>.COM

“ Hello sir, I am <name of city administrator> and would like the attached statistics filled out and sent back to me. Kindly send me the doc and also advise if you have questions. Look forward you hear from you soon

… Mr. <name of city administrator> ”

Page 37: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 38: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 39: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 40: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 41: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

Kurzer Exkurs: vom Wasserwerk zu Schiffen ...Automated Identification System (AIS)

41

Page 42: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

42

Page 43: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

AIS Video: http://www.youtube.com/watch?v=QObWQ14EtFA Text

http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
Page 44: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very
Page 45: EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein … · 2016-09-19 · McAfee: Avoiding the 9111 -Level Cyber Armageddon 24 OCT. zoo I Share I'm at thig and the ig the very

http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdfhttp://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf

AIS Video: http://www.youtube.com/watch?v=QObWQ14EtFA

Weitere Informationen

http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/tm-wp-ics-scada-praxistestpumpstation-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.trendmicro.de/media/wp/ics-scada-praxistest-pumpstation-teil-2-whitepaper-de.pdf
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA
http://www.youtube.com/watch?v=QObWQ14EtFA

2014 - ERA · Multi-annual Financial Framework 2014-2020 for which the economic perspective is demanding, with tight expenditure ... 6 Adopted version 26.11.2013 1. European policy

Small treatise about e-manipulation for honest peopleesec-lab.sogeti.com/static/publications/08-eicar-emanipulation.pdf · Small treatise about e-manipulation for honest ... Google

Niklas wilhelmsson eparticipation-26.11.2013

From ERASMUS „Intensive Programmes“ to ERASMUS+ „Strategic Partnerships“ Dr. Sabine Habermalz | 26.11.2013 ERASMUS Institutional Coordinator | International

THE CASE FOR BINARY OPTIONS - forexforum.investor.bgforexforum.investor.bg/2013/downloads/Tradologic_FF_Investor_2013.pdf · 26.11.2013 · BINARY OPTIONS MARKET PRESENTATION 4 The

FIIT STU, Bratislava 26.11.2013 Peter Šinkovič AGILE INTRO ...vranic/mps/p/p09-Agile_Intro_III.pdf · AGILE INTRO (SCRUM & MORE) FIIT STU, Bratislava 26.11.2013 ... SCRUM in 100

Creation and Transmission of the Chi Med Srog Thig-libre

Acquia digital entertainment masterclass 26.11.2013

APT - EICAR › files › eicar_wg2_2015... · Our motivation for APT detection Traditional solutions have limitations –Targeted attacks are hard to detect –Detection, containment

New AV-Comparatives Security Survey 2013 · 2016. 12. 10. · EICAR is the best-known overall, and especially in Europe (47.7%) and North America (46%). This may be because EICAR

COLLECTIF MU REVUE DE PRESSE 2013mu.asso.fr/NewsletterMU/ressources/revuedepresse/RDP MU...Brain Magazine 25.11.2013 Time Out 27.11.2013 Time Out 27.11.2013 Teleram Sortir 26.11.2013

Recycling of mercury containing lamps in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013

Selfness The best thing, what could happen to us: to understand ourselves → HEALTH Your health is your responsibility LifeStyle Medicine 26.11.2013, Belgrade

AVerify - EICAR · 2010-05-10 EICAR 2010 A philosophical note Information sharing is a good thing, in general –Security through obscurity never works See: Mifare (RFID), A5/1 (GSM),

Vita Nova St. Petersburg, Russia Personnel development in YIT St. Petersburg Alexey Ustinov (Personnel and corporate affairs director) 26.11.2013 Kuopio

AMP for Endpoints SF-EICAR - Cisco · Version 5.4 Cisco AMP for Endpoints SF-EICAR 4 CHAPTER 2 SF-EICAR THE ATTACK The attack starts when the victim opens a PDF …

Growing old gracefully - 2013/Temadag...–Eddy current –Magnetic Stress measurement Growing Integrity Management tool box 26.11.2013 18 Information management in 21st century 26.11.2013

Google@Croud Master Slides 26.11.2013

Clinical Operations and Key Quality Indicators Performance ... · 26.11.2013  · Clinical Operations & Key Quality Indicators Performance Report – October 2013 Northern Devon Healthcare

Recycling of mercury containing lamps in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013 Christof Delatter Association of Flemish Cities and Municipalities

Exeter staff meeting 26.11.2013 Professor Steve Thornton, Dean

Peta regionalna konferencije o zdravstvenom, velnes i SPA turizmu, 26.11.2013., Beograd Tematska celina "Primeri dobre prakse klastera u regionu“ Klasteri

JavaScript and VisualBasicScript Threats - EICAR · AJAX = Asynchronous JS and XML ... less and less used for web pages or inside applications ... Response page is built using request

No Safety Without Security - EICAR · Threats come from a variety of sources, including intentionally malicious and unintentionally malignant. The goal of security therefore is to

HappyLunch© #5 26.11 · HappyLunch© #5 Happiness at work 2.0 26.11.2013 Laurence Vanhee - @Happy_Laurence +32475500604 – [email protected]

130 CONFIDENTIALfc95d419f4478b3b6e5f-3f71d0fe2b653c4f00f32175760e96e7.r87.cf1.rac… · vietnamese refugees wit: ... might 3e helpfu il managinn thig probles m eithe b applyiny r

Formation of tariff policy of household waste management in Flanders ETT 53729 – Kiev, Ukraine 25-26.11.2013 Christof Delatter Association of Flemish Cities

Mercedes-Benz Accessories GmbH A Daimler Company Update - Genuine Mercedes-Benz accessories Christina Gousetis (MBA/ATP) 26.11.2013

COS1311 Gesamt PDF D - cossma.com · 26.11.2013 The EU Cosmetic Regulation: Manchester TSGE Forum A Conference on Compliance (North) Großbritannien 26.–27.11.2013 Marca Blanca

University of Adelaide...(Lot) him ( uor it) alone (Is) my mother River Where Iou have stolen that Strong Close, near Over there go She (is) wife Coning thig way, or going thig way

| Dr. Philipp v. Wrangell | ERASMUS STAFF TRAINING WEEK | 26.11.2013

AVG 8.5 Internet bezbednostaa-download.avg.com/filedir/doc/AVG_Internet_Security/avg_ais_uma... · 8.3 Skeniranje celog racunara ..... 38 8.4 Eicar test ... 12.5.2 Performanse

Driving Waste Management towards Recycling Estonia’s experience 25-26.11.2013, Kiev TAIEX workshop Peeter Eek Waste Department, Ministry of the Environment

EICAR WGII Meeting, 26.11.2013 Honigtopf mal anders: ein ... · Philpott children were 'happy and looked after. court told as parents Sentence ... 010041 cac 2E4 0100M 1 F3zc WEBC2.Y21K

Microsoft Defender ATP on Virtual Desktop Infrastructure · test (which corresponds with the opening of the .bat file that copied the EICAR file), before tapering down to just above