Mark Harris, Sophos

Mark Harris joined Sophos in September 2005 as global director of SophosLabs™. Based at Sophos's global headquarters near Oxford, Harris manages the company's worldwide threat analysis teams, which deliver round-the-clock protection to its growing worldwide customer base.

Harris joined Sophos from McAfee where, since 1997, he held the positions of Director of Engineering, Chief Software Architect and Senior Development Manager. A respected security industry expert, Harris was responsible for a 30-strong team covering multiple sites, including the UK, India and Canada.

Harris leads Sophos's team of experts, based in the UK, Australia, Canada, and US, which issues 24-hour protection in order to ensure its customers' networks automatically detect and block new threats. He also manages proactive technology development, including Sophos's Genotype™ detection technology, which uses forensic analysis to identify suspicious patterns and characteristics unique to either a virus family or a spam campaign.

In the past Mark has participated in a panel of experts at the Anti-Phishing Working Group (APWG) conference in Brussels, where they discussed and demonstrated the latest trends in financially motivated malware. Mark has also presented on the topic of Malware – Virus, spyware and rootkits in Stockholm, Sweden.

Infect me baby one more time! - Anatomy of modern malware campaigns
In this presentation, Mark Harris from Sophos will present an overview of
how malware has evolved over time from 'kids' showing off to financially
motivated professionals.

Specific campaigns will be examined to show how spam, infected websites and
malware are used to infect unsuspecting users with banking Trojans, Spyware
and other malware. Sophisticated multi component malware will be dissected
to show how malware authors use software engineering best practices to make
the most of their developed code.

Finally, through further examples of real campaigns, the move away from
malware in email attachments to compromised websites and so called 'drive
by' infections will be discussed.