Top Performing Account Crackers: Business Modules, Architecture, & Techniques
Arik Atar dissects the commercial ecosystem of credential stuffing and bot networks, reverse engineering account crackers and automated scalp bots.
Summary
The Lucrative Underground Industry of Automated Scalping
From high-demand electronics and limited sneakers to concert tickets, automated botnets monopolize online checkouts and execute massive credential stuffing campaigns.
Architecture and Business Models of Account Crackers
Arik Atar reverse engineers popular commercial cracking suites (SilverBullet, OpenBullet), examining proxy rotators, request solving engines, and fingerprint spoofers.
Bypassing Modern Bot Detection and CAPTCHAs
Atar illustrates how bot operators defeat behavioral telemetry, solve advanced CAPTCHAs via third-party farms, and mimic legitimate mobile browser signatures.
Enterprise Bot Mitigation and Adaptive Defenses
The presentation details effective defensive counter-strategies—including device attestation, behavioral rate limiting, and risk-based multi-factor authentication.
Related talks
Main Stage·34 min
Michael Torres · Zane Hoffman
Provides an inside look at a massive operational relay network (ORB) of compromised IoT devices and routers used by Chinese APT actors to obfuscate cyber attacks.
Main Stage·33 min
Ben Folland
Demonstrates methodologies for intercepting and decrypting command-and-control traffic between active malware implants and adversary servers.
Village Presentations·37 min
Elliot Brink
Elliot Brink analyzes over one year of telemetry from a globally distributed honeypot sensor network, tracking automated botnet propagation and brute-force trends.