Monday, March 17, 2025

[DMANET] Upcoming DFIR Stream 0xE Webinar — “Identifying Fraudulent CAPTCHA Solvers Using Network Propagation Analysis”

Dear All,

We are excited to invite you to an upcoming DFIR Stream 0xE webinar:
Title: "Identifying Fraudulent CAPTCHA Solvers Using Network
Propagation Analysis"

Presenters:
-Martynas Buožis — Information Security Architect, Amadeus Data Processing GmbH
-Umberto Fontana — PhD Candidate, Telecom SudParis & Amadeus IT Group

Abstract:
Malicious actors often use CAPTCHA Farms to bypass bot protection,
enabling fraud such as inventory denial and SMS pumping. These farms
cleverly mirror IP addresses and client fingerprints, making
traditional detection methods ineffective. Meanwhile, their
CAPTCHA-solving times are indistinguishable from legitimate users.

In this talk, our speakers will present a novel technique for
uncovering the use of CAPTCHA Farms by analyzing network propagation
times. By comparing observed delays with the geographic distances
implied by IP addresses, this approach aims to statistically identify
suspicious patterns.

- Date & Time: Tuesday, March 25, 2:00 – 3:00 pm (GMT+00:00)
- Location: Online (Pre-registration required)
- Event Registration Link: https://www.acfti.org/news-events/dfir-stream-0xe
- Online Registration Ends: March 23 at 04:00 PM (GMT+00:00)

Don't miss this chance to learn about cutting-edge research on
detecting fraudulent CAPTCHA solvers and to provide valuable feedback!

======Housekeeping Notes======

- Note that this event is online only. Hence, You must register to
receive a link to connect. Due to limited availability, we kindly ask
you to register as soon as possible to ensure your participation in
the webinar of your choice.

Finally, I would like to remind you that the call for speakers is
currently open on the dedicated DFIR stream website,
https://dfir.stream/call-for-guest-speakers

#CyberSecurity #DFIR #CAPTCHA #OnlineFraud

Best regards,
Andrew Zayin Ph.D., CISSP, CISM, CRISC, CDPSE, PMP
ACFTI Secretariat

**********************************************************
*
* Contributions to be spread via DMANET are submitted to
*
* DMANET@zpr.uni-koeln.de
*
* Replies to a message carried on DMANET should NOT be
* addressed to DMANET but to the original sender. The
* original sender, however, is invited to prepare an
* update of the replies received and to communicate it
* via DMANET.
*
* DISCRETE MATHEMATICS AND ALGORITHMS NETWORK (DMANET)
* http://www.zaik.uni-koeln.de/AFS/publications/dmanet/
*
**********************************************************