Tag: csis

  • The Bagsu banker case – presentation

    Some time ago, researchers at CSIS Security Group discovered the infrastructure of a “quiet” banking trojan actor that had been targeting German users since at least 2014. At VB2019 CSIS researcher Benoît Ancel gave a talk in which he provided a technical insight into the whole operation: infrastructure, multi-platform trojans, money laundering schemes, and a…

  • VB2018 presentation: The wolf in sheep’s clothing – undressed

    In recent years, we have seen a trend of commercial spyware being sold to governments. This is a very controversial subject, not least because of the frequent use of this spyware against opposition targets. However, there is general agreement that the malware tends in most cases to be well written. There are exceptions though. At…

  • VB2018 presentation: The wolf in sheep’s clothing – undressed

    In recent years, we have seen a trend of commercial spyware being sold to governments. This is a very controversial subject, not least because of the frequent use of this spyware against opposition targets. However, there is general agreement that the malware tends in most cases to be well written. There are exceptions though. At…

  • VB2016 video: Neverquest: Crime as a Service and On the Hunt for the Big Bucks

    Earlier this month, Spanish police officers arrested a Russian national on suspicion of creating the Neverquest banking trojan. Neverquest, also known as Vawtrak, is one of the most prevalent banking trojans of the moment, so while the arrest might not have a significant impact on cybercrime overall, it is good news: it sends the important message…

  • VB2016 video: Neverquest: Crime as a Service and On the Hunt for the Big Bucks

    Earlier this month, Spanish police officers arrested a Russian national on suspicion of creating the Neverquest banking trojan. Neverquest, also known as Vawtrak, is one of the most prevalent banking trojans of the moment, so while the arrest might not have a significant impact on cybercrime overall, it is good news: it sends the important message…