Learning More About the Underground Economy : A Case-Study of Keyloggers and Dropzones


Holz, Thorsten ; Engelberth, Markus ; Freiling, Felix


[img]
Preview
PDF
impersonation_attacks_TR.pdf - Published

Download (1MB)

URL: http://ub-madoc.bib.uni-mannheim.de/2160
URN: urn:nbn:de:bsz:180-madoc-21608
Document Type: Working paper
Year of publication: 2008
Publication language: English
Institution: School of Business Informatics and Mathematics > Sonstige - Fakultät für Mathematik und Informatik
MADOC publication series: Veröffentlichungen der Fakultät für Mathematik und Informatik > Institut für Informatik > Technical Reports
Subject: 004 Computer science, internet
Classification: CCS: K.6.5 D.4.6 ,
Subject headings (SWD): Computersicherheit , Malware
Keywords (English): Underground Economy , Banking Trojan , Impersonation Attacks
Abstract: We study an active underground economy that trades stolen digital credentials.We present a method with which it is possible to directly analyze the amount of data harvested through these types of attacks in a highly automated fashion. We exemplify this method by applying it to keylogger-based stealing of credentials via dropzones, anonymous collection points of illicitly collected data. Based on the collected data from more than 70 dropzones, we present the first empirical study of this phenomenon, giving many first-hand details about the attacks that were observed during a seven-month period between April and October 2008. This helps us better understand the nature and size of these quickly emerging underground marketplaces.
Additional information:

Das Dokument wird vom Publikationsserver der Universitätsbibliothek Mannheim bereitgestellt.




+ Citation Example and Export

Holz, Thorsten ; Engelberth, Markus ; Freiling, Felix (2008) Learning More About the Underground Economy : A Case-Study of Keyloggers and Dropzones. Open Access [Working paper]
[img]
Preview


+ Search Authors in

+ Download Statistics

Downloads per month over past year

View more statistics



You have found an error? Please let us know about your desired correction here: E-Mail


Actions (login required)

Show item Show item