F-Secure Oyj · OMXHEX:FSECURE
F-Secure Oyj — Investor Day (November 2017)
40 slides from F-Secure Oyj's investor day presentation, November 2017
Slide 1: Mikko Hypponen, CRO, F-Secure
Mikko Hypponen CRO, F-Secure @mikko
Slide 2: Wana Decrypt0r 2.0
Wana Decrypt0r 2.0 What Happened to My Computer? Your important files are encrypted. Many of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are busy looking for a way to recover your files, but do not waste your time. No
Slide 3: a —SSC
a —SSC 11:12 AM Eastern
Slide 4: NHS hack crisis tweet
! Ollie Cowan @ eg . 2> Follow @Ollie_Cowan Police are at Southport Hospital & ambulances are 'backed up' at A&E as staff cope with the ongoing hack crisis #NHS
Slide 5: Bitcoin ransom demand
sn $900 worth of bitesin to tis saarave Teer Uaiingo; Se —
Slide 6: Your files have been encrypted
Coops your fies nave been encrypted!
Slide 7: aan
aan Wivewvy vv YeVY¥¥¥y TOUTTTVOU
Slide 8: Slide 8
Slide 9: Slide 9
Slide 10: Code comparison
‘|. 10004BA0: 10004BA1: 10004BA2: ebx ebp ? 00402560 - 00402561 -00402562: 55 push ebp 10@04BA3: 8B6C2410 mov ebp, [esp] 99492563: 8B6C2410 mov ebp, [esp][010] .10@04BA7: 56 push esi -0@402567: 56 push esi 10Q04BA8: 57 push edi .@0402568: 57 push edi .10@04BA9: 6A20 push 020 s' * Ft o9402569: 6A20 p
Slide 11: Bank heists
Heist 1 Bangladesh → Philippines $81 Million dollars Heist 2 Unknown bank Unknown amount Heist 3 Ecuador → Hong Kong $12 Million Heist 4 Vietnam → Kenya Failed
Slide 12: The Interview / Sony
NEIGHBORS THIS IS THE END JAMES FRANCO SETH ROGEN OFS Gee SISAL INTERVIEW “7 IN THEATERS THIS FALL
Slide 13: N.S.A. Breached North Korean Networks Before Sony Attack
© N.S.A, Breached North Kore x € > CG BD wwwnytimes.com/2015/01/19/world/asia/nsa-tapped-into-north-korean-networks-before-sony-attack-officials-say.html = sections € Home Q searcu The New York Times ASIA PACIFIC N.S.A. Breached North Korean Networks Before Sony Attack, Officials Say WASHINGTON — Th
Slide 14: This note is legal tender
THIS NOTE IS LEGAL TENDER 1, DEBTS, PUBLIC AND PRIVATE BLOSSOM WAYS RNY Ane cate DIP TH AAS Se SOLES SEES BOTS EIST TES,
Slide 15: This note is legal tender
THIS NOTE IS LEGAL TENDER FOR ALL, DEBTS, PUBLIC AND PRIVATE (Yann) Lerbedlo Cabral Treasurer of the United States.
Slide 16: Ransom note
it don to ue ste your tine, Hobo ad personal in jour personal inst f you already purchased your ey: ; tion ki key: tion to e-na
Slide 17: M.E.Doc
M.E.Doc xX >= Oo X < (6) A medocua aXe = Q TexHi4Ha nigtpumka +380 44 206 72 10 Biggin npopanxis +380 44 206 72 15 me rome ancrraar MPOHAC MAPTHEPCbKAMEPE)KA HOBVUHV KOHTAKTU BUULuno OHOB/IEHHA 10.01.196 DetanbHiwe
Slide 18: © F-Secure Confidential
18 © F-Secure Confidential
Slide 19: Slide 19
Slide 20: Slide 20
Slide 21: Almost all ports are operational
Almost all ports are operational and running close to normal. We are pleased to share that since yesterday, we have been able to reestablish business in: We are still working on expanding our services in the following ports: s. We are pleased to be able to deliv- arimannrte again fram tha tarminal W
Slide 22: Slide 22
Slide 23: Slide 23
Slide 24: Bloc
Bloc 4
Slide 25: Bloc
Bloc 4
Slide 26: Petya in Blockchain
Petya in Blockchain 26 Visualization by Keith Collins
Slide 27: Prykarpattyaoblenergo
Prykarpattyaoblenergo
Slide 28: 28
28
Slide 29: Protecting the irreplaceable
Protecting the irreplaceable | f-secure.com
Slide 30: Slide 30
Slide 31: Industrial control system screen
Sal S/n a/Ale/ al] AS1 / YPOL 0% 100 % 100 % ‘SvS1 S¥S2 SvS3 24,3 °C 28,1 °C. 27,7 OLO1-GP41 68 M3 OLJETAMKAR eu GoT4 evs oTil 180 kPa O%
Slide 32: Furnace energy counter
c Furnace energy counter Oo Hz Durston Reman T28530725 J] Eneroy set/act:[___okwh _]foeaa0nwn_] sp Energy sev/act:[ _ oxwhf] [aaoanwn] Weight set/act: Temp. setvact:[_1360°C J Twin Power - Circuit Furnace energy counter Melting energy counter Melting energy counter 2548 1198kWh = AA 29611676 kWh Str
Slide 33: Building automation interface
Ubersicht WZ Raum- temperatur EG Raum- temperatur temperatur Datum 17.92°C 18.40°C Fri 16.10.15 09:28:07 Anlagen Bedienung Alarm Status System Status Direkte-Alarme Ein Wasseralamm| Gasalarm | Rauchalarm | Heizungatarm aktivieren | aktivieren | aktivieren | _aktivieren [ Il Il Il Direkte Meidungen (
Slide 34: Default usernames and passwords
Username Password admin admin root default support support admin password root root root 12345 root password service service guest guest root user tech tech mother fucker
Slide 35: Are software companies
ff) >» my if ' fl ie Ty y e bo il | "a Le a ARE SOFTWARE | COMPANIES IW Ve « ~ hie i A le
Slide 36: REINS
REINS
Slide 37: Slide 37
Slide 38: j
j
Slide 39: Be a ES, ae a a!
Be a ES, ae a a! net AE GEO-ae0 EO ee ia fe foe 12 LEU | i Par er es a : REE
Slide 40: Mikko Hypponen, CRO, F-Secure
Mikko Hypponen CRO, F-Secure @mikko