Abstract

If you take a look at your email box, especially into the spam folder, you will see bunch of emails… You're asking yourself how comes all these spammers know my email address and spam it? More interesting when you register brand new email address not really connected to your real name and after sometime spam reaching you and you feels like somebody cheating you… Why it happens, where leaking your data, how data monetised and small Proof-of-concept tool to detect such activities will be presented during the PoC talk.

TALK:

Talk will consists of three parts:

• Overall summary of data leak cases and what type of data leaking during compromise of popular web resources with examples.

  • Passwords / Access credentials leaks. Leaks during account registration on well know web resources. Leaks on private machines. Leak as a unofficial data resale.
  • Underground market of data leak and how data possibly used / monetised
  • Loud use cases (will be selected right before the conference and synced with PoC committee)

• Technology of one-time emails to catch data leak most popular resources.

  • Two ways of email address leak.
  • One time token emails to detect where exactly information about email going to
  • Possible usage of one time token emails for corporate/private to trace on daily basis if data leak is happened or not.