Detecting Blue Team Research Through Targeted Ads
0x200b presents detecting blue team research through targeted ads: When my implant gets discovered how will I know?
Summary
Architecture and Background
When my implant gets discovered how will I know?
Vulnerability Analysis
Did the implant stop responding for some benign reason or is the IR team responding?
Exploitation and Demonstrations
With any luck they'll upload the sample somewhere public so I can find it, but what if I can find out if they start looking for specific bread crumbles in public data sources?
Remediation and Defensive Strategies
At some point without any internal data all blue teams turn to OSINT which puts their searches within view of the advertising industry. In this talk I will detail how I was able to use online advertising to detect when a blue team is hot on my trail.
Related talks
Main Stage·46 min
Josh Mitchell
Josh Mitchell presents ridealong adventures: critical issues with police body cameras: The police body camera market has been growing in popularity over the last few years.
Main Stage·1 hr 56 min
Svea · Suggy · Till
Svea et al. presents inside the fake science factory: Fake News has got a sidekick and it's called Fake Science.
Main Stage·47 min
Si · Agent X
Si and Agent X presents wagging the tail:covert passive surveillance: In this modern digital age of technically competent adversaries we forget that there may still be a need to conduct old school physical surveilla...