Black Hat·37 min
Zuzana Hromcova
Analysts investigate attack surfaces and defenses concerning Anatomy of Native IIS Malware.
50 talks tagged with this topic.
Loading filters…
1–24 of 48 talks / 50 · loading…
Black Hat·37 min
Zuzana Hromcova
Analysts investigate attack surfaces and defenses concerning Anatomy of Native IIS Malware.
Community Stage·30 min
Joe 'Juno' Aurelio
Joe Aurelio draws parallels between video game cheat loaders and enterprise malware, exploring how anti-cheat countermeasures mirror modern EDR evasion tradecraft.
Creator Stage·48 min
Asher Davila
Examines the challenges of analyzing Go-based IoT malware and demonstrates reversing techniques using the Pumabot surveillance botnet as a case study.
Kaspersky·35 min
Security researchers examine technical aspects of Lab's research on Mac malware outbreaks: SabPub Trojan and Flashback/Flashfake Botnet.
Kaspersky·18 min
Industry experts analyze emerging threats surrounding Malware in the industrial world.
Main Stage·40 min
Mikko Hypponen
Mikko Hypponen explores the preservation of historic malware samples, early virus artistry, and four decades of digital threats in the Malware Museum.
Main Stage·50 min
Olivier Bilodeau · Estelle Ruellan
Demonstrates leveraging multimodal LLMs to analyze millions of infostealer infection screenshots and autonomously extract indicators of compromise.
Main Stage·52 min
Patrick Wardle
Patrick Wardle provides an advanced guide to Apple's Endpoint Security framework, demonstrating how to build robust, kernel-level telemetry and macOS malware detection.
Main Stage·16 min
Valerio Alessandroni
Valerio Alessandroni demonstrates how remote access trojans abuse trusted Google Cloud services and APIs for stealthy C2 communication and proxy tunneling.
Payment Village·38 min
Federico Valentini · Allesandro Strino
Analyzes the rise of NFC relay Malware-as-a-Service platforms and Android banking trojans that bypass contactless payment security for large-scale card-present fraud.
Nishant Sharma
Scan and score browser extensions for spyware and supply-chain risk.
Security BSides San Francisco·28 min
Presents BSidesSF 2018 - An Open Source Malware Classifier and Dataset (Phil Roth) and evaluates key implications for security practitioners.
Creator Stage·22 min
Mauro Eldritch · Cybelle Oliveira
Introduces mFT, an open-source tool demonstrating how to use blockchain-backed non-fungible tokens as immutable command-and-control infrastructure.
Creator Stage·43 min
Josh Pyorre
Explores building detection signatures from network transaction timing intervals to identify malicious command-and-control communication.
Main Stage·47 min
Alessandro Magnosi
Malware deployment tactic exploiting NTFS features and emulated read-only filesystems to bypass endpoint inspection.
Main Stage·45 min
RJ McDown
RJ McDown presents Obligato, a covert implant communication framework that abuses legacy Windows session architectures to decouple C2 traffic from malware processes.
Main Stage·35 min
Vangelis Stykas
Vangelis Stykas demonstrates how typical web application flaws in abandoned malware C2 infrastructure allow researchers to compromise admin panels and identify threat actors.
RSAC Cybersecurity·51 min
Security researchers examine technical aspects of Hacking Exposed: Beyond the Malware.
War Stories·44 min
Andrew Brandt
Andrew Brandt investigates targeted intrusion campaigns where adversaries engage victims in live conversational social engineering to deliver malware.
BruCON Security Conference·45 min
Ben Heimerdinger · Sebastian Feldmann
Ben Heimerdinger examines 05 - BruCON 0x0D - PIC Your Malware!.
BruCON Security Conference·44 min
František Střasák
František Střasák investigates Brucon 0x09 - Detecting malware even when it is encrypted.
Main Stage·42 min
Jimmy Wylie
Dragos principal researcher Jimmy Wylie breaks down PIPEDREAM, a modular industrial attack toolkit developed by state-sponsored actors to disrupt industrial processes.
Main Stage·32 min
Michael Bargury
Michael Bargury weaponizes Windows 11's built-in Power Automate for desktop, creating zero-binary, signatureless 'no-code malware' that bypasses EDR controls.
Blockchain Village·40 min
Josh McIntyre
Josh McIntyre reviews subtle attack vectors that result in permanent cryptocurrency loss, covering clipboard hijackers, phishing dApps, and user operational errors.