Nitesh Dhanjani

Black Hat Briefings 2008 (Washington DC)

I presented Bad Sushi: Beating Phishers at their Own Game with Billy Rios last week at the Black Hat Briefings in DC. The best part of the experience was the opportunity to talk to people in the audience after the presentation, and to hear their perspectives on the subject.

Here is what others have to say about the presentation:
Black Hat Lifts the Cover Off ID Theft Phishing Networks [eWeek]
The myth of the Ninja Hacker [CNET]
Black Hat D.C. wraps up [CNET]
Black Hat, Day 1: Cracking GSM and skimming ATMs [ZDNet, thanks Nate]
Black Hat: Honor Among Thieves?

Here is some additional coverage:
Bank scammers scammed, says security researcher [The Register]
World of Phishing Exposed (podcast)
Researchers Expose "Stupid Phisher Tricks" [Dark Reading]
How phishers work -- the inside story [Guardian]
Most Phishers Clueless, Say Researchers

If you were unable to attend the presentation, but would like to get a glimpse of the material, please read the on-line interview with Billy and me that I linked to earlier: Interview with Nitesh Dhanjani and Billy Rios, Spies in the Phishing Underground.

Since the presentation, Billy and I have discussed new material applicable to this presentation, and so I think we will be continue to present updated versions of this talk at future security conferences.

Bad Sushi: Beating Phishers at their Own Game

Help Net Security has posted an interview with me and Billy Rios titled Spies in the Phishing Underground.

If you enjoyed the interview, and if you want more details and screen-shots, check out our talk at the Federal Black Hat Briefings 2008 [February 20]. The title of the talk is Bad Sushi: Beating Phishers at their Own Game. Following is a brief description:

This talk will expose the tools and tactics used by the phishing underground.  Follow us as we track real life phishers hiding in the shadiest corners of the Internet, analyze the tools used by phishers, and discover the sites where real life identities are being bought and sold.

The specific topics covered by this talk will include: how phishers set up a phishing site, a look at the back-doors and phishing kits used by phishers, determining how phishers steal identities, and a detailed look at the forums used to buy and sell the stolen identities.

We are excited about all our discoveries and we looking forward to the conference. We are also concerned about all the information we have discovered, and we are already sharing this information with the authorities.

Also, Billy does a fantastic job of summing up our enthusiasm and concerns in his blog.

DeepSec 2007 @ Vienna, Austria

I'll be speaking at the DeepSec 2007 conference this week. More information at the conference website.

hack.lu 2007

I'll be speaking at the hack.lu 2007 security conference in Luxembourg on October 20, 2007. My talk is titled Breaking and Securing Web Applications. The conference agenda is here.

Black Hat Briefings 2007, Las Vegas

I'll be at the Black Hat briefings in Las Vegas this week. In addition to the briefings, I enjoy going to Black Hat to reconnect with old friends, and to make new friends in the security industry. It is also a delight to meet people who read my blog and to have the chance to hear their thoughts and philosophies.

If you will be there as well, and would like to catch up, please send me an email.

OSCON 2005

I was in Portland last week for OSCON 2005. My presentation went very well, and I was quite excited and impressed with the turnout. I was also invited to be in a panel with Daniel Veditz and Alex Vincent - we had a lot of interesting discussions relating to open source and security.

OSCON was full of friendly people who seem so passionate about open source and new technologies. Unlike some other conferences, the folks attending OSCON radiate _positive_ energy, and this is quite refreshing. I will make an attempt to attend OSCON every year.

Here are some pictures I took. One of the pictures contains Phillip Torrone, who at the time was busy popping balloons and sizzling plastic cups with a high-powered green laser.

OSCON 2004

Just got back to Seattle after speaking at OSCON 2004. I am quite happy with the talk, the audience seemed to enjoy it quite a bit. Unfortunately, I only got into Portland yesterday night from Blackhat Vegas, so I missed most of OSCON. Oh well, maybe next year!

Done with Blackhat, OSCON on Friday

Presented my "Hacking Without Re-inventing the Wheel" talk at Blackhat today. I talked about the importance of Open Source Attack & Penetration tools, along with demonstrating how to write Nessus and Ettercap plug-ins. Things went pretty well and I was pleased with the response overall. However, if I do present this talk again, I will probably tweak it a bit and cover more details.

I'm off to OSCON 2004 tomorrow. I present "Using and Extending Open Source Attack & Penetration Tools" there on Friday.

OSCON 2004

I will be speaking at OSCON 2004. My presentation will be titled "Using and Extending Open Source Attack & Penetration Tools". See you there!