JPCERT/CC

144 talks · 2005–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• [JSAC2025] Operation AkaiRyū: MirrorFace invites Europe to EXPO 2025 and revives ANEL backdoor -JP- 2025
• [CODE BLUE 2018] LogonTracer Demonstration 2018
• [JSAC2019] Opening talk – Looking back on the incidents in 2018 – (Japanese) 2018
• [JSAC2024] NSPX30: a sophisticated AitM-enabled implant evolving since 2005 - English - 2005
• [JSAC2024] NSPX30: a sophisticated AitM-enabled implant evolving since 2005 - Japanese - 2005
• [JSAC2019] Attack against Publicly Accessible Servers Forcing Cryptocurrency Mining (Japanese)
• [JSAC2019] Understanding Command and Control -An Anatomy of xxmm Communication - (Japanese)
• [JSAC2019] What do you do on the weekend? Are you busy? Will you analyze DbD? (Japanese)
• [JSAC2020]An Overhead View of the Royal Road
• [JSAC2020]macOS用アーティファクト収集ツールと簡易マルウェア解析サンドボックスの実装と利用方法
• [JSAC2020]オープニングトーク 2019年のインシデントを振り返る
• [JSAC2020]ランサムウェアに標的型攻撃手法を求めるのは間違っているだろうか
• [JSAC2020]攻撃キャンペーン「Operation Bitter Biscuit」を実行した標的型攻撃グループに関する脅威情報
• [JSAC2020]日本を狙うばらまきメールキャンペーンの脅威動向分析と対策
• [JSAC2020]自作ツールを使用したMac Forensicsの調査効率化
• [JSAC2021] A Certain Emotet Campaign -Impact in Japan-
• [JSAC2021] A41APT case ~Analysis of the Stealth APT Campaign Threatening Japan
• [JSAC2021] Accelerating the Analysis of Offensive Security Techniques Using DetectionLab
• [JSAC2021] After JSAC2021
• [JSAC2021] GhostDNSbusters: Tracking and Responding to a Large Scale DNS Hijacking Campaign
• [JSAC2021] Grasping a Big Picture of Shathak Attack Campaign
• [JSAC2021] Knock, knock, Neo. - Active C2 Discovery Using Protocol Emulation
• [JSAC2021] LuoYu, the eavesdropper sneaking in multiple platform
• [JSAC2021] NanoCoreHunter: Track NanoCore C&C Server and Monitor RAT Operator for 180 Days
• [JSAC2021] Opening talk
• [JSAC2021] Threat Hunting of Attack Campaign Targeting Cryptocurrency Service Providers
• [JSAC2021] When you gaze into the Bottle,...
• [JSAC2021] Workshop: Malware Analysis at Scale ~Defeating EMOTET by Ghidra~
• [JSAC2021] Workshop: Shuffle the SOC - automating anything, anytime, anywhere
• [JSAC2021]A Picture of Business Email Compromise Triggered by A Security Breach at Business Partners
• [JSAC2022] AfterJSAC2022
• [JSAC2022] Ambiguously Black: The Current State of Earth Hundun's Arsenal
• [JSAC2022] Crazy Journey: Evolution of Smoky Camouflage
• [JSAC2022] Emotet vs EmoCheck Emotet開発者との戦い
• [JSAC2022] LuoYu: Continuous Espionage Activities Targeting Japan with the new version of WinDealer
• [JSAC2022] ma2tl: macOS Forensics Timeline Generator Using mac_apt Analysis Results
• [JSAC2022] Opening talk
• [JSAC2022] Workshop: An Introduction to macOS Forensics with Open Source Software
• [JSAC2022] Workshop: YARA Pretty Darby: Hunt the Spider like a Champ
• [JSAC2022] カオス化する A41APT キャンペーンに対して私達ができること
• [JSAC2022] 日本にシェアが集中するCMSを狙う特異な攻撃者と侵害ツールの調査
• [JSAC2023] - Workshop - Detection engineering with Sigma Defend against APT targeting.. - Japanese -
• [JSAC2023] - Workshop- Surviving the hurt locker: or How I Learned to Stop Worrying.. - Japanese -
• [JSAC2023] AfterJSAC2023
• [JSAC2023] Catching the Big Phish: Earth Preta Targets Government, Educational,and .. - English -
• [JSAC2023] Demystifying China’s Supply Chain Attack Targeting Financial Sector - English -
• [JSAC2023] Demystifying the China’s Supply Chain Attack Targeting Financial Sector - Japanese -
• [JSAC2023] Fighting to LODEINFO: Investigation for Continuous Cyberespionage Based on.. - English -
• [JSAC2023] First Step to Active Cyber Defence:The Significance of Profiling Attackers - English -
• [JSAC2023] How Do We Fight against Evolving Go Language Malware? Practical Techniques.. - English -
• [JSAC2023] JITHook - from .NET JIT Compilation Hooking to Its Packer / Unpacker - Japanese -
• [JSAC2023] JITHook - from .NET JIT Compilation Hooking to Its Packer / Unpacker- English -
• [JSAC2023] LIGHTNING TALK SESSION - English -
• [JSAC2023] LIGHTNING TALK SESSION - Japanese -
• [JSAC2023] Localization of Ransomware, New Change or Temporary Phenomenon? - English -
• [JSAC2023] Localization of Ransomware, New Change or Temporary Phenomenon? - Japanese -
• [JSAC2023] New Research Methods to Predict Attack Trends Using Public Information - English -
• [JSAC2023] The Rule for Wild Mal Gopher Families - Japanese -
• [JSAC2023] The Rule for Wild Mal-Gopher Families - English -
• [JSAC2023] Trends in Exploitation of Legitimate Tools inRecent Targeted Ransomware.. - English -
• [JSAC2023] 「アクティブ・サイバー・ディフェンス」事始め ～攻撃者プロファイリングの意義について～ - Japanese -
• [JSAC2023] 公開情報により攻撃動向の予測を行う新たな試みと調査手法の共有 - Japanese -
• [JSAC2023] 昨今の標的型ランサムウェア攻撃における正規ツールの悪用傾向とその分析 対策手法 - Japanese -
• [JSAC2023] 進化するGo言語製マルウェアとどう戦うか？: 解析能力向上に向けての実践的テクニック
• [JSAC2023]Catch the Big Phish Earth Preta Targets Governmental, Educational and Research..-Japanese-
• [JSAC2023]Fighting to LODEINFO Investigation for Continuous Cyberespionage Based on Open..-Japanese-
• [JSAC2024] - Workshop- Infrastructure Tracking With Mihari - Japanese -
• [JSAC2024] Amadey マルウェアに関する活動実態の変遷から得られる教訓 - Japanese -
• [JSAC2024] Analysis of Activities and Tools of Phishing Actors Targeting Japan - English -
• [JSAC2024] Analysis of Activities and Tools of Phishing Actors Targeting Japan - Japanese -
• [JSAC2024] Dark Side of VSCode ~ How Attacker Abuse VSCode as RAT ~ - English -
• [JSAC2024] ESXi: Detect the Future A0acker’s Playground at Ring -1 - English -
• [JSAC2024] ESXi: Detect the Future A0acker’s Playground at Ring -1 - Japanese -
• [JSAC2024] Lessons Learned from Changes in Activities Related to Amadey Malware - English -
• [JSAC2024] LIGHTNING TALK SESSION - Japanese -
• [JSAC2024] The Only Reason Why We Should Identify The Thread Actor of Ransomware Inci... - English -
• [JSAC2024] The Secret Life of RATs: connecting the dots by dissecting multiple backdoor - Japanese -
• [JSAC2024] The Secret Life of RATs: connecting the dots by dissecting multiple backdoors - English -
• [JSAC2024] Threat Intelligence of Abused Public Post-Exploitation Frameworks - English -
• [JSAC2024] Threat Intelligence of Abused Public Post-Exploitation Frameworks - Japanese -
• [JSAC2024] Unmasking HiddenFace: MirrorFace’s most complex backdoor yet - English -
• [JSAC2024] Unmasking HiddenFace: MirrorFace’s most complex backdoor yet - Japanese -
• [JSAC2024] Unveiling TeleBoyi: Chinese APT Group Targeting Critical Infrastructure W... - Japanese -
• [JSAC2024] Unveiling TeleBoyi: Chinese APT Group Targeting Critical Infrastructure Wo... - English -
• [JSAC2024] XFiles: Large-Scale Analysis of Malicious MSIX/APPX - English -
• [JSAC2024] XFiles：悪性MSIX/APPXの大規模分析 - Japanese -
• [JSAC2024] ランサムウェア攻撃のアクター特定をすべきこれだけの理由 - Japanese -
• [JSAC2024] 標的型攻撃者によるVSCodeの武器化 - Japanese -
• [JSAC2024]After JSAC2024
• [JSAC2025] China-aligned PlushDaemon APT compromises supply chain of Korean VPN - Japanese -
• [JSAC2025] Stealth in the Shadows: Dissecting Earth Freybug's Recent Campaign and ... - English -
• [JSAC2025] Analysis of Attack Strategies Targeting Centralized Management Solutions - English -
• [JSAC2025] Analysis of Attack Strategies Targeting Centralized Management Solutions - Japanese -
• [JSAC2025] China-aligned PlushDaemon APT compromises supply chain of Korean VPN - English -
• [JSAC2025] Follow the Clues: Everyday is lazarus.day - English -
• [JSAC2025] Follow the Clues: Everyday is lazarus.day - Japanese -
• [JSAC2025] Hack The Sandbox: Unveiling the Truth Behind Disappearing Artifacts - English -
• [JSAC2025] Hack The Sandbox: Unveiling the Truth Behind Disappearing Artifacts - Japanese -
• [JSAC2025] IoC LIGHT - Lifecycle of Indicators: Gathering, Handling, and Termination - - English -
• [JSAC2025] IoC LIGHT - Lifecycle of Indicators: Gathering, Handling, and Termination - - Japanese -
• [JSAC2025] JSAC2025 Lightening Talk Session - Japanese -
• [JSAC2025] Observation of phishing criminal groups related to illegal money transfers ... - English-
• [JSAC2025] Ransomware's Secret Tunnel: How Ransomware Groups Hijack ESXi and NAS for ... - English -
• [JSAC2025] Ransomware's Secret Tunnel: How Ransomware Groups Hijack ESXi and NAS for... - Japanese -
• [JSAC2025] Rapidly Changing Trends in Phishing -Sharing real-time phishing site ... - English -
• [JSAC2025] Stealth in the Shadows: Dissecting Earth Freybug's Recent Campaign and ... -Japanese-
• [JSAC2025] 不正送金に係るフィッシング犯行グループの観測とみずほの対策 -フィッシングサイト・マルウェア「KeepSpy」との戦い- - Japanese -
• [JSAC2025] 急速な変化を見せるフィッシングのトレンド -フィッシングサイトリアルタイム検知システムの共有- - Japanese -
• [JSAC2025]Operation AkaiRyū: MirrorFace invites Europe to EXPO2025 and revives ANEL backdoor-English
• [JSAC2026] A deep-dive into RapperBot C2 operation and DDoS attacks - English -
• [JSAC2026] Attribution in Action: A Case Study of an Incident Involving Multiple Activity Clusters
• [JSAC2026] Attribution in Action: A Case Study of an Incident Involving Multiple Activity Clusters
• [JSAC2026] Continuous Evolution of Tianwu’s Pangolin8RAT and Custom Cobalt Strike Beacon - English -
• [JSAC2026] Continuous Intrusion/Continuous Distribution: Tracking Fox’s Iterative Malspam Campaign
• [JSAC2026] Continuous Intrusion/Continuous Distribution: Tracking Fox’s Iterative Malspam Campaign
• [JSAC2026] Following the Trace: Reconstructing Attacks from Ext4 and XFS Journals - English -
• [JSAC2026] Following the Trace: Reconstructing Attacks from Ext4 and XFS Journals - Japanese -
• [JSAC2026] From Access to Encryption: Uncovering Qilin’s Attack Lifecycle - English -
• [JSAC2026] From Access to Encryption: Uncovering Qilin’s Attack Lifecycle - Japanese -
• [JSAC2026] Ghost in Your Network: How Earth Kurma Stays Hidden and Exfiltrates Your Data -Japanese-
• [JSAC2026] Infrastructure-less Adversary: C2 Laundering via Dead-Drop Resolvers and the Microsoft ..
• [JSAC2026] Konni’s New Arsenal: Unmasking GSRAT in North Korea-linked APT Operation - English -
• [JSAC2026] Konni’s New Arsenal: Unmasking GSRAT in North Korea-linked APT Operation - Japanese -
• [JSAC2026] RapperBotのC2オペレーションとDDoS攻撃の詳細 - Japanese -
• [JSAC2026] The Betrayed Update: Beyond the Signpost - English -
• [JSAC2026] The Betrayed Update: Beyond the Signpost - Japanese -
• [JSAC2026] Unraveling the WSUS Exploit Chain: Incident Analysis and Actor Insights - English -
• [JSAC2026] Unraveling the WSUS Exploit Chain: Incident Analysis and Actor Insights - Japanese -
• [JSAC2026] 進化を続けるTianwuのマルウェアPangolin8RATおよびカスタムCobalt Strike Beacon - Japanese -
• [JSAC2026]Ghost in Your Network: How Earth Kurma Stays Hidden and Exfiltrates Your Data - English -
• [JSAC2026]Infrastructure-less Adversary:C2 Laundering via Dead-Drop Resolvers and the Microsoft ..
• [JSAC2026]The Return of Old Forces:Revealing New Campaigns Connected to A Missing Cyber Mercenary ..
• [JSAC2026]The Return of Old Forces:Revealing New Campaigns Connected to A Missing Cyber Mercenary ..
• [制御システムセキュリティカンファレンス2025] 「制御システム・セキュリティの現在と展望～この1年間を振り返って～」
• [制御システムセキュリティカンファレンス2026] 「サイバー攻撃に対応した安全・セキュリティ統合設計の推進」
• [制御システムセキュリティカンファレンス2026] 「制御システムセキュリティの現在と展望 ～この1年間を振り返って～」
• [制御システムセキュリティカンファレンス2026] 「工場が昔からやっていた『備え』に学ぶ、制御システムインシデント対応」
• [制御システムセキュリティカンファレンス2026] 「欧州法規制等の法的対応で関心が高まる脆弱性情報およびCVD関連の活動に関する国際動向」
• [制御システムセキュリティカンファレンス2026] 「自動車産業におけるデジタルツインのセキュリティ課題と防御手法」
• [制御システムセキュリティカンファレンス2026] 開会ごあいさつ
• Cyber Defence Centre (CDC) in 5 minutes
• Emotet感染の確認方法と対策
• 侵入型ランサムウェア攻撃の初動対応のポイント
• 日本中で感染が広がるマルウェアEmotet