Conversations with a botmaster 1© 2009 Cisco, Inc. All rights reserved.Cisco

Cisco Security Intelligence OperationsUpdate: Interview With A Botmaster

Henry Stern <hestern@cisco.com>Craig Williams <craiwill@cisco.com>

© 2009 Cisco, Inc. All rights reserved.CiscoConversations with a botmaster 2

Conversations with a Botmaster

Building Trust

The Back story

© 2009 Cisco, Inc. All rights reserved.CiscoConversations with a botmaster 3

What We Learned

IM Spam was primary vector

Selling bots only earns 10-25 cents

Earn 5-10k a week phishing

He focused on phishing Bank info

Why? Criminal record No Education

© 2009 Cisco, Inc. All rights reserved.CiscoConversations with a botmaster 4

Q and A

This paper, “Infiltrating a Botnet,” will be the featured content on Wednesday April 1st

Or get it now at:

www.cisco.com/security/bestpractices

Cisco Security Center

www.cisco.com/security

© 2009 Cisco, Inc. All rights reserved.CiscoConversations with a botmaster 5

© 2009 Cisco, Inc. All rights reserved.CiscoConversations with a botmaster 6