Learn EDR Internals: Research & Development From The Masters
The Most Addictive Python and SQL Courses
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation examines the discovery and investigation of a large cryptojacking attack that affected thousands of websites, including government sites. It reviews website remediation and protections such as subresource integrity and content security policy.
Syllabus
Intro
Beginning
Coinhive
Investigation
Malicious JavaScript
http://scotthel.me/gov-crypto-dork
TV episode
Subresource integrity
Benefits
Drawbacks
Content security policy
Violation report
Magecart
Notable Magecart attacks
Taxonomy of an attack
Outro
Taught by
GOTO Conferences