Exploring Hacked Data Services & Defending against the Magecart Gang

DEFCON Toronto’s November meetup, hosted at the BlueCat offices on Yonge Street, with two talks. Trevor Giffen and Pamela Hammer, both students in Networking and IT Security at the University of Ontario Institute of Technology, covered the history and design of hacked data services, including Have I Been Pwned, one of the first, from 2013. They also walked through how they were building their own, called Breach Analytica.

Talesh Seeparsan told the story of Magecart, a gang that became prolific at stealing credit card data online. He had been defending against them for four years, and he went through the defences he tried and how the attackers got around them. The talk had JavaScript on screen to decipher.