资源描述:
《2017金融威胁白皮书》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、InternetSecurityThreatReportISTRFinancialThreatsReview2017AnISTRSpecialReportAnalyst:CandidWueestMay2017ContentsExecutivesummary,keyfindings,andintroductionTargetedfinancialheistsInfection,prevalence,anddistributionTactics,techniques,andproceduresAttacksagainstATM,POS,andmobileD
2、isruptionsandtakedownsConclusionProtectionInternetSecurityThreatReportContents3Executivesummary,keyfindings,Graphics,Tables,andChartsandintroduction5Overviewofcommonthreatsagainstfinancialinstitutions6Targetedfinancialheists10DocumentmacroandJSdownloaderdetectionspermonthin20167
3、Lazarus10Typicallureemailwithmaliciousdocumentattachment8Odinaff11BankingTrojandetectionsonthecomputer,2016and20159Infection,prevalence,anddistribution11Distributionoffinancialmalwaredetections10Infectionvectors11Numberoffinancialthreatdetectionsin2016and201510Prevalence12Monthl
4、ydetectioncountfortopfourthreatsin201611Threatfamilydistribution12DetectionnumbersforSnifulaandBeblohinQ1201712Geographicaldistribution12ComputerscompromisedwithbankingTrojans,bycountry201613Japaninfocus13Countriesrankedbypercentageof13Distributioninrelationtoconfigurationglobal
5、detectionsseenperyear14Analysisoftargetedinstitutions13DetectionsinJapanasapercentageofglobaldetections,groupedbytwomonthsin2016.16Tactics,techniques,andprocedures14RegionaldistributionofthethreeDridexsamplesdiscussed17Sourcecodemerging14MosttargetedcountriesbasedonURLs17Sandbox
6、evasioninwebinjectconfiguration17Remotedesktopaccess15Top10countriestargetedbyAndroid.Fakebank.B18Diversion15Toptargetedfinancialinstitutionsinsamplegroup18Webinjects17PercentageofVMawaresamplesin2016perfamily18Redirectionmethod19Sessionhijacking19Filelessloadpoints19Overlayform
7、s19AtomBombinginjection19Socialengineeringattacks20Whataretheystealing?21AttacksagainstATM,POS,andmobile22ATMandPOS22Androidfinancialthreats24Disruptionsandtakedowns25Dyre25Avalanche25Arrests26Conclusion28Protection30AboutSymantec30MoreInformationInternetSecurityThreatReportExec
8、utivesummary,keyfindings,andintroductionSection