Fungible Threats
Demonstrates how adversaries abuse distributed data replication systems, IPFS, NFTs, and Cloudflare R2 for resilient C2 infrastructure and payload delivery.
Summary
Abusing Distributed Data Replication for Malware Infrastructure
Distributed data storage and content delivery networks provide high redundancy and censorship resistance, but these same architectural traits offer adversaries resilient channels for command-and-control (C2) and malicious payload distribution.
Adversary Tradecraft Across IPFS, NFTs, and Cloudflare R2
Mauro Eldritch and Nelson Colon demonstrate how threat actors leverage InterPlanetary File System (IPFS) nodes, NFT metadata, Codex, and Cloudflare R2 object storage to host un-takedownable C2 channels, second-stage droppers, and dynamic phishing landing pages.
Evading Infrastructure Takedowns and Blocking
Traditional domain-based indicators of compromise (IOCs) fail against decentralized storage protocols where cryptographic content hashes replace fixed IP addresses, requiring defensive teams to adapt threat-hunting playbooks.
Related talks
Briefings·38 min
Shu-Hao Tung
Gaining initial access to an intranet is one of the most challenging parts of red teaming.
Main Stage·42 min
Jason Lang
Introduces advanced offensive networking techniques and covert communication channels to bypass modern enterprise perimeter monitoring and EDR telemetry.
Main Stage·42 min
Gal Weizman
Demonstrates how WebRTC channels and enterprise web conferencing platforms can be repurposed as stealthy command-and-control and data exfiltration pipelines.