{
  "url": "https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11566.html",
  "id": 11566,
  "guid": "d175d882-b2ec-4dc3-90de-b5429df2607f",
  "logo": null,
  "date": "2020-12-27T14:00:00+01:00",
  "start": "14:00",
  "duration": "00:40",
  "room": "rC2",
  "slug": "rc3-11566-tracking_ransomware_end-to-end",
  "title": "Tracking Ransomware End-to-end",
  "subtitle": "",
  "track": "IT-Security",
  "type": "Talk",
  "language": "en",
  "abstract": "Ransomware is a type of malware that encrypts the files of infected hosts and demands  payment,  often in a cryptocurrency such as Bitcoin. In this talk, we present a measurement framework that we used to perform a large-scale, two-year, end-to-end measurement of ransomware payments, victims and operators. ",
  "description": "By combining an array of data sources, including ransomware binaries, seed ransom payments, victim telemetry from infections, and a large database of Bitcoin addresses annotated with their owners, we sketch the outlines of this burgeoning ecosystem and associated third-party infrastructure. In particular, we trace the financial transactions, from the moment victims acquire bitcoins, to when ransomware operators cash them out.\r\n\r\nWhile our study focuses on  ransomware, our methods are potentially applicable to other cybercriminal operations that have similarly adopted  Bitcoin as their payment  channel.",
  "recording_license": "",
  "do_not_record": false,
  "persons": [
    {
      "id": 12791,
      "public_name": "Max Aliapoulios"
    }
  ],
  "links": [
    {
      "url": "http://damonmccoy.com/papers/ransomware_paper.pdf",
      "title": "Tracking Ransomware End-to-end"
    }
  ],
  "attachments": [],
  "room_id": "32b5ad05-ab7d-44eb-a6e6-7ca616eed34a",
  "origin": null
}