Tempting as it may be to "hack back", current US law makes it illegal to do so. Hacking back is illegal, and sitting back is frustrating and ineffective. Fortunately, there's a middle ground: Active Defense. In this presentation I will present the results of numerous Active Defense operations that have resulted in: 1) Seizure of bank accounts used to launder money, 2) Takedown of various online accounts used to lure victims and money mules, 3) (Legal!) Exfiltration of the scammer's mailbox. I will also present some of the findings from the exfiltrated mailboxes, such as the different types of scams the BEC actors are involved with, which Crypter services are used by the BEC scammers, and which services the scammers use to find their victims.
Parking tip: A member has reported that the DaVita parking garage (1900 16th St) charges only $5 between 5-7 pm.