1. Durban, South Africa, 8 July 2013 Automated Targeted Attacks Alexandru Catalin Cosoi, Chief Security Strategist, Bitdefender acosoi@bitdefender.com ITU Workshop on “Countering and Combating Spam” (Durban, South Africa, 8 July 2013)

2. Spam Breakdown by Type Durban, South Africa, 8 July 20132

3. Attachments Breakdown by Type Durban, South Africa, 8 July 20133

4. MiniDuke attack Durban, South Africa, 8 July 20134

5. Antispam Tech Maturity Durban, South Africa, 8 July 20135

6. Questions What is your name or nickname? What are your interests? Who do you work for? Who are your friends/colleagues? What is you job title? Who is you manager/CEO/director? Who are your family members? Are you married? With whom? Durban, South Africa, 8 July 2013 6

7. Our Online Identity Durban, South Africa, 8 July 2013 7

8. Google Search Durban, South Africa, 8 July 2013 8

9. 123people.com search Durban, South Africa, 8 July 2013 9

10. Pipl.com search Durban, South Africa, 8 July 2013 10

11. After 3 searches Name: Alexandru Catalin Cosoi Company: Bitdefender Job Title: Chief Security Strategist Email: acosoi@bitdefender.comacosoi@bitdefender.com Social media accounts: all, including LinkedIn profile and foursquare checkins Wife’s email address Durban, South Africa, 8 July 2013 11

12. Example Dear Alexandru Cosoi, We tried contacting your wife Carmen in regard to participation to the 19 th Annual Conference of [whatever]. Is [wife’s email] her correct email address? Can you please forward the attached PDF with the official invite? Durban, South Africa, 8 July 2013 12

13. Conclusions Social engineering works. Social engineering can be automated We need to understand the addiction to social networks and the fact that users will post information about themselves online Education can work. It’s our duty to educate both users and employees about social engineering and how their own data can turn against them. Durban, South Africa, 8 July 2013 13

14. More Conclusions Spam content will become personal and unique Content filtering technologies will start having a hard time detecting all samples Users might consider antispam filters when detecting highly social engineered spam messages Durban, South Africa, 8 July 201314

15. Questions? www.bitdefender.com acosoi@bitdefender.com Durban, South Africa, 8 July 201315