Case Study in Using Bad Malware Design Against Attackers

Software developers have provided unlimited job security for the infosec industry. Likewise, malware authors also have a history of making bad design choices that allow defenders opportunities to use those mistakes against them. Between failed crypto...

Software developers have provided unlimited job security for the infosec industry. Likewise, malware authors also have a history of making bad design choices that allow defenders opportunities to use those mistakes against them. Between failed crypto implementations in ransomware to "license verification" of commercial malware tools, even malware software developers suck.This talk will focus on several case studies, one being of AlienSpy/JSocket and the design decisions made by the author that can be used to great effect to disable the malware world-wide. The earlier version, AlienSpy, was knocked out worldwide forcing the developer to create an entire new version of the malware and have all his customers reinstall (potentially losing their victims). Others will be added for interesting current events.