Attackers are increasingly using botnets not just to launch distributed denial-of-service attacks or financial attacks, but also to identify high-value "zombie" PCs that they have managed to infect. That's because they can sell access to these high-value PCs to the highest bidder.
So says Menno van der Marel, CEO of Delft-based Dutch consultancy Fox-IT, which has built its reputation on digital forensics investigations, collaboration with law enforcement agencies, as well as the research it publishes related to emerging malware and organized crime threats.
In an interview recorded at RSA Conference 2015, van der Marel also details:
- Why new attacks typically target financial services firms - and financial data - before any other type of organization;
- How organizations can react more quickly to alerts related to emerging attacks;
- The importance of attributing attacks both to the technology involved as well as the person or people who launched it;
- How criminals continue to learn from nation-state and APT attacks, and other information security attack trends.