VB2025

51 talks · 2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Prediction of future attack indicators based on the 2024 analysis of threats from malicious app... 2024
• Arachnid alert: Latrodectus loader crawls through defences — Albert Zsigovits VMRay
• Attacker identity revealed: insights from rogue VMs & BYOVD in EDR evasion Navin Thomas, Renzon Cruz
• Beyond machine translation struggles and adaptations of North Korean IT workers in Japan's...
• Beyond the SERP when black hat SEO campaigns evolve into a multi faceted criminal threat — Joey Chen
• Binary facades: script extraction from compiled macOS malware - Patrick Wardle (Objective-See)
• Boosting URL detection with syntactic features in spam emails — Antonia Scherz Net at Work
• Chinese APTs targeting semiconductor companies in South Asian countries - Niranjan Jayanand
• ClickFix: exploiting the clipboard for multi-stage payload delivery across OS platforms
• Closing keynote: Cybersecurity 2035 — where will we be in 10 years' time — Paul Ducklin
• Collaborative response to emerging critical RCE vulnerabilities in exposed edge devices
• Cracked by the GRU: how Russia’s notorious Sandworm unit weaponizes pirated software usage to target
• Deep dive into the abuse of DL APIs to create malicious AI models and how to detect them
• Demystifying the Playboy RaaS — Gijs Rijnders, Dutch National Police
• Don’t fear journalists! Talk to me! Hacks, exploits & best practices for improving...
• Emmenhtal Loader: the silent enabler of modern malware campaigns
• European PDNS Readiness - Viliam Peli & George Buhai (Whalebone)
• Evading in plain sight: how adversaries beat user mode protection engines for over a decade
• Exploiting compiler theory to automate the extraction of IOCs from JavaScript malware —Matthew Nunes
• Fireside chat: The tortured “cybersecurity” poets department
• From billion queries to action: how DNS4EU transforms threat defence — Sebastian Garcia
• Goodbye loaders, hello RMM: the rise of legit software in ecrime campaigns
• How MITRE is AI, anyway? — Samir Mody (K7 Computing)
• Hunting potential C2 commands in Android malware via Smali string comparison and control flow
• Inside Akira, ransomware's Rust experiment — Ben Herzog, Check Point
• Inside Pandora's Box: dissecting the latest arsenal and tactics of APT27 — Naoki Takayama
• Intercepting entropy: hooking PRNG to recover ransomware encryption keys — Raviv Rachmiel
• Invisible thieves in the front yard: from an advanced evasive edge-device attack to potential...
• Malicious GenAI Chrome extensions: unpacking data exfiltration and malicious behaviours
• Measurement matters - Michael Daniel Cyber (Threat Alliance)
• No payload for you: inside Sidewinder's selective exploitation strategy— Eliad Kimhy & David Catalan
• Rogue hirer, rogue hiree: workplace cyber threats to individuals and businesses — Chris Boyd
• Shared secret: EDR killers in the kill chain — Gabor Szappanos (Sophos)
• Silent killers: unmasking a large-scale legacy driver exploitation campaign — Jiří Vinopal
• Silent Lynx: uncovering a cyber espionage campaign in Central Asia
• Smashing smishing by quashing quishing — Andrew Brandt (Netcraft)
• Sophistication or missed opportunity? Analysing XE Group’s long term exploitation of zero days...
• Stealth over TLS: the emergence of ECH-based C&C in ECHidna malware — Yuta Sawabe & Rintaro Koike
• Stop the flood: building a quality and trust driven threat intelligence ecosystem — SuhMahn Hur
• The attribution story of WhisperGate: an academic perspective - Alexander Adamov & Anders Carlsson
• The Bitter end: unravelling 8 years of APT antics
• The dark prescription: inside the infrastructure of illegal online pharmacies
• The Phantom Circuit: the Lazarus Group's evolution in supply chain compromise — Ryan Sherstobitoff
• The Wolf of Wall Steal: inside crypto traffer group operations — Anna Pham Huntress & Joan Garcia
• Tracking the IoT botnet's bloodline: code footprints don’t lie
• Unmasking TAG 124: dissecting a prevalent traffic distribution system in the cybercriminal ecosystem
• Unmasking the GrassCall campaign: the hackers behind job recruitment cyber scams
• Unmasking the unseen: a deep dive into modern Linux rootkits and their detection
• Vietnamese hacking group: a rising of information-stealing campaigns going global
• When avatars come alive: understanding hybrid threat actors — Itay Cohen & Omer Benjakob
• You definitely don’t want to CopyPaste this: FakeCaptcha ecosystem — Dmitrij Lenz & Roberto DaSilva