VB2018 preview: From drive-by download to drive-by mining

Posted by   Martijn Grooten on   Aug 15, 2018

"Understanding the new paradigm", Malwarebytes researcher Jérôme Segura writes in the title of his upcoming VB2018 presentation on drive-by mining. He could hardly have put it more accurately – the rise of malicious cryptocurrency miners is the main security trend of the past 12 months.

In the paper, Jérôme will look at those miners that run in the browser, often (though not always) without the user's permission (hence the term "drive-by mining"). The paper not only looks at how this kind of mining works, but also puts it in the context of a decline in exploit kits and the rise of Monero, a cryptocurrency well suited for in-browser mining.

Figure4.png

Jérôme, who has spoken at Virus Bulletin conferences several times before, is one of the leading experts on exploit kits (his quarterly overviews are a must-read for anyone following this type of threat) and we very much look forward to him providing the audience with a well-informed overview of this very important development.

Jérôme's presentation is just one of many great reasons to come to VB2018 (2-4 October in Montreal). Check out the speaker page for details of other leading experts presenting at the event, and check out the programme for full details of what else is on the agenda - book your ticket now for what promises to be a memorable event!

And don't forget, if you have some (hot) research to share, the call for last-minute papers remains open until 2 September.

VB2018-withdate-325w.jpg

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

VB2019 paper: Domestic Kitten: an Iranian surveillance program

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video…

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

VB2019 paper: DNS on fire

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

German Dridex spam campaign is unfashionably large

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.