VB2024

52 talks · 2022–2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Confronting the surge of macOS stealers in 2024 - Kseniia Yamburh (MacPaw (Moonlock Lab)) 2024
• Ghosts from the past become Gh0stbusters in 2024 - Hiroshi Takeuchi (MACNICA) 2024
• Reviewing 2022 KA SAT incident & implications for distributed communication environments -Joe Slowik 2022
• A web of surveillance - Jurre van Bergen (Amnesty International)
• A wild RAT appears: reversing DinodasRAT on Linux - Anderson Leite
• An open source cloud DFIR kit – Dredge! - Santiago Abastante (Solidarity Labs)
• Android Flutter malware - Axelle Apvrille (Fortinet)
• Arming WinRAR deep dive into APTs exploiting WinRAR's 0 day vulnerability – a SideCopy case study
• Automatically detect and support against anti debug with IDAGhidra to streamline debugging process
• BEC and phishing targets local election candidate me! - Andrew Brandt (Sophos)
• Breaking boundaries investigating vulnerable drivers and mitigating risks - Jiří Vinopal
• Byteing back: detection, dissection & protection against macOS stealers Patrick Wardle Objective-See
• Code blue: energy - Righard Zwienenberg & Josep Albors (ESET)
• CrackedCantil a malware symphony delivered by cracked software; performed by loaders, infostealers..
• Dark deals: unveiling the underground market of exploits - Anna Pavlovskaia (Kaspersky)
• From code to crime: exploring threats in GitHub Codespaces - Jaromir Horejsi & Nitesh Surana
• Getting cozy with milk and WARMCOOKIES - Daniel Stepanic (Elastic)
• Hospitals, airports and telcos – modern approach to attributing hacktivism attacks - Itay Cohen
• IcePeony with the '996' work culture - Rintaro Koike & Shota Nakajima
• Inside the VB Conference (VB2024)
• Leveraging AI to enhance the capabilities of SHAREM Shellcode Analysis Framework Bramwell Brizendine
• Life & DEaTH: building detection, forensics, & intelligence at scale Selena Larson & Konstan Klinger
• Marketplace scams: neanderthals hunting mammoths with Telekopye - Jakub Souček & Radek Jizba (ESET)
• Modern-day witchcraft: a new breed of hybrid attacks by ransomware operators -Vaibhav Deshmukh et al
• Multimodal AI: the sixth sense for cyber defence - Younghoo Lee (Sophos)
• Octopus Prime: it didn't turn into a truck, but a widely spread Android botnet - Thibault Seret
• Open by default: the hidden cost of convenience in network security - Aurelio Picon (CUJO AI)
• Origins of a logger - Agent Tesla - Berk Albayrak & Utku Çorbacı (Malwation)
• P-wave of malicious code signing - Yuta Sawabe & Rintaro Koike (NTT Security Holdings)
• Proactively hunting for low reputed infrastructure used by large cybercrimes and APTs - Janos Szurdi
• Project 0xA11C deoxidizing the Rust malware ecosystem - Nicole Fishbein & Juan Andrés Guerro-Saade
• Shadow play: WildCard's malware campaigns amidst Israel Hamas conflict NicoleFishbein, RyanRobinson
• SO that looks suspicious: leveraging process memory and kernel/usermode probes to detect Shared...
• Sugarcoating KANDYKORN: a sweet dive into a sophisticated MacOS backdoor - Salim Bitam (Elastic)
• Supercharge your malware analysis workflow - Ryan Samaroo & Jean Pierre Vigneault
• TA577 walked just past you indirect syscalls in Pikabot - Emre Güler (VMRay)
• The Impersonators - Gabor Szappanos & Steeve Gaudreault (Sophos)
• The Mask has been unmasked again - Georgy Kucherin & Marc Rivero López
• TIPS Keynote: No more secrets in cybersecurity implementing ‘radical transparency’ Suzanne Spaulding
• TIPS: Certified malware: a case for industry TI sharing of DigSig metadata Samir Mody (K7)
• TIPS: Fireside chat: Achtung Baby! Cybersecurity insights with U2 you too - Jeannette Jarvis et al.
• TIPS: Indicator wranglin’ – an approach to dynamically typing IOCs with poor data context -Noah Dunn
• TIPS: Panel: Briskets or biscuits how to construct your CTI team
• TIPS: Stix and stones: enabling faster intelligence gathering with GenAI and OASIS - Kieran Hughes
• TIPS: Unveiling cybersecurity impact the role of published security findings in strengthening...
• TIPS: Wrap up - Michael Daniel (Cyber Threat Alliance)
• Tracking FIN7 malware honeypots, new AI deepfake lures - Zach Edwards (Silent Push)
• Unveiling shadows: key tactics for tracking cyber threat actors, attribution, and infrastructure...
• VB2024 Closing keynote: May you live in interesting times - Brian Honan (BH Consulting)
• VB2024 Opening keynote: Solving puzzles: protecting high risk communities - Runa Sandvik (Granitt)
• Who plays on AZORult? An unknown attacker collects various data and spreads additional payloads
• Workshop: Writing malware configuration parsers - Mark Lim & Zong Yu Wu (Palo Alto Networks)