Keynote | SLEUTHCON 2025

Defining Crimeware

Paul Melson's SleuthCon keynote traces financially motivated crimeware—purpose-built software used to generate illegal revenue—distinguishing it from espionage, hacktivism, or generic malware that lacks direct monetization. The session blends history with lessons for modern defenders.

Professional Networks for Hunting

Before the historical survey, Melson argues professional relationships are undervalued for threat hunting—not just job searches. No individual possesses all data, skills, or ideas needed to disrupt criminal ecosystems at scale; collaboration across the community multiplies impact.

Early Eras of Digital Crime

He revisits dial-up-era scams including premium 900-number fraud and trojanized "copy protection" programs. One investigation traced a $9.95 campaign using a valid VeriSign code-signing certificate impersonating a legitimate client to a likely Las Vegas front company—what he calls early American crimeware.

Botnets and Patterns

The narrative continues through IRC botnets and evolving distribution models. Melson seeks recurring patterns across decades that might inform better defenses today, framing the talk as nostalgia with analytical purpose rather than pure storytelling.