Leviathan Command and Control Communications on Planet Earth - Kevin Thompson
Explore the global landscape of command and control (C2) communications in malware ecosystems through this GrrCON 2014 conference talk. Dive into the LEVIATHAN project, examining worldwide malware signatures, tactics, and procedures across various industry verticals. Analyze callback patterns, including ebb and flow, targeted callbacks, and semantic signatures. Investigate how malware hides in plain sight and study the global C2 network map. Examine connectivity trends and malware distribution by country and industry vertical. Gain insights into geopolitical reflections, such as the Ukraine crisis and Israel-Gaza conflict, through unique callback analysis. Understand the USA's position as the top callback destination and explore traffic patterns in countries like Russia, Ukraine, and Israel.