Presentation library

Welcome to the VB2021 conference!

Welcome to the VB2021 conference!

ON DEMAND

A deep dive into Water Roc, one of the most relentless ransomware groups

Programme Separator
Feike Hacquebord (Trend Micro), Fernando Merčes (Trend Micro) & Ian Kenefick (Trend Micro)
33:16
ON DEMAND

A detailed analysis of a new version of Darkside ransomware (v. 2.1.2.3)

Programme Separator
Vlad Pasca (LIFARS)
17:52
ON DEMAND

All roads lead to Rome: the Conti manual leak dissection

Programme Separator
Gabriela Nicolao (Deloitte) & Luciano Martins (Deloitte)
24:49
ON DEMAND

Android stalkerware: hunting automation, analysis and detection

Programme Separator
Shankar Raman Ravindran (NortonLifeLock)
14:42
ON DEMAND

Bugs in malware – uncovering vulnerabilities found in malware payloads

Programme Separator
Nirmal Singh (Zscaler) & Uday Pratap Singh (Zscaler)
32:37
ON DEMAND

CTO (Call Tree Overviewer): yet another function call tree viewer

Programme Separator
Hiroshi Suzuki (Internet Initiative Japan)
30:45
ON DEMAND

Endpoint security checkbox: a stealthy approach to cyberdefence

Programme Separator
Nathaniel Adewole (Esentry System)
34:09
ON DEMAND

Evolution after prosecution: Psychedelic APT41

Programme Separator
Aragorn Tseng (TeamT5), Charles Li (TeamT5), Peter Syu (TeamT5) & Tom Lai (TeamT5)
32:16
ON DEMAND

From match fixing to data exfiltration – a story of Messaging as a Service (MaaS)

Programme Separator
Robert Neumann (Acronis) & Gergely Eberhardt (Search-Lab)
34:30
ON DEMAND

Hunting web skimmers with VirusTotal and YARA

Programme Separator
Jérôme Segura (Malwarebytes)
30:42
ON DEMAND

Introducing subCrawl – a framework for the analysis and clustering of hacking tools found using open directories

Programme Separator
Josh Stroschein (Independent researcher), Patrick Schläpfer (HP) & Alex Holland (HP)
27:45
ON DEMAND

LazyScripter: from Empire to double RAT

Programme Separator
Hossein Jazi (Malwarebytes)
21:49
ON DEMAND

Operation Bookcodes – targeting South Korea

Programme Separator
Tae-woo Lee (Korea Internet & Security Agency), Dongwook Kim (Korea Internet & Security Agency) & Byeongjae Kim (Korea Internet & Security Agency)
21:01
ON DEMAND

Operation Newton: Hi Kimsuky? Did an Apple(seed) really fall on Newton’s head?

Programme Separator
Jaeki Kim (S2W), Sojun Ryu (S2W) & Kyoung-ju Kwak (S2W)
19:42
ON DEMAND

Pay2Key – the newly discovered ransomware traced all the way to Iran

Programme Separator
Gil Mansharov (Check Point) & Ben Herzog (Check Point)
34:23
ON DEMAND

Ransomware: a correlation between infection vectors and victims

Programme Separator
Doina Cosovan (Security Scorecard), Cătălin Liță (Security Scorecard), Jue Mo (Security Scorecard) & Ryan Sherstobitoff (Security Scorecard)
26:15
ON DEMAND

Reverse Android malware like a Jedi Master

Programme Separator
Axelle Apvrille (Fortinet)
25:21
ON DEMAND

Sandworm: reading the indictment between the lines

Programme Separator
Anton Cherepanov (ESET) & Robert Lipovsky (ESET)
16:57
ON DEMAND

Security: the hidden cost of Android stalkerware

Programme Separator
Lukas Štefanko (ESET)
22:32
ON DEMAND

Shades of Red: RedXOR Linux backdoor and its Chinese origins

Programme Separator
Avigayil Mechtinger (Intezer) & Joakim Kennedy (Intezer)
16:30
ON DEMAND

ShadowPad: the masterpiece of privately sold malware in Chinese espionage

Programme Separator
Yi-Jhen Hsieh (SentinelOne) & Joey Chen (SentinelOne)
33:47
ON DEMAND

STK, A-OK? Stopping messaging attacks on vulnerable SIMs

Programme Separator
Cathal Mc Daid (AdaptiveMobile Security)
35:00
ON DEMAND

The ‘ghost hand’ attack

Programme Separator
Fabio Marenghi (Kaspersky) & Fabio Assolini (Kaspersky)
27:16
ON DEMAND

The baffling Berserk Bear: a decade’s activity targeting critical infrastructure

Programme Separator
Joe Slowik (Gigamon)
26:29
ON DEMAND

The keksec’s botnets we observed in the past year

Programme Separator
Ye Jin (Qihoo 360) & Lingming Tu (Qihoo 360)
28:46
ON DEMAND

Threat hunting: from SolarWinds to Hafnium APT

Programme Separator
Niv Yona (Cybereason) & Eli Salem (Cybereason)
25:24
ON DEMAND

UNC788: Iran’s decade of credential harvesting and surveillance operations

Programme Separator
Emiel Haeghebaert (FireEye)
30:29
ON DEMAND

Uncovering automatic Obfuscation-as-a-Service for malicious Android applications

Programme Separator
Masarah Paquet-Clouston (GoSecure), Vit Sembera (Trend Micro), Sebastian Garcia (Stratosphere Laboratory) & Maria Jose Erquiaga (Cisco Systems)
32:44
ON DEMAND

When malware changed its mind: an empirical study of variable program behaviours in the real world

Programme Separator
Erin Avllazagaj (University of Maryland, College Park), Ziyun Zhu (Facebook), Leyla Bilge (NortonLifeLock Research Group), Davide Balzarotti (EURECOM) & Tudor Dumitras (University of Maryland, College Park)
29:07
ON DEMAND

Where is the cuckoo egg?

Programme Separator
Ryuichi Tanabe (NTT Security (Japan) KK), Hajime Takai (NTT Security (Japan) KK) & Rintaro Koike (NTT Security (Japan) KK)
33:12
ON DEMAND

Your five most critical M365 vulnerabilities revealed and how to fix them (Partner Content)

Programme Separator
Andy Syrewicze (Hornetsecurity)
47:26
TIPS

TIPS#1 Keynote: The Community Effect

Programme Separator
Samantha Madrid (Juniper)
11:45
TIPS

TIPS#2 Now you see me, now you don’t

Programme Separator
Jonas Walker (Fortinet)
32:39
TIPS

TIPS#3 Operation Diànxùn: a cyberespionage campaign targeting telecommunication companies

Programme Separator
Thibault Seret (McAfee) & Thomas Roccia (McAfee)
21:59
TIPS

TIPS#4 Panel: A tale of two companies

Programme Separator
Kathi Whitbey (Palo Alto Networks), Righard Zwienenberg (ESET), Noortje Henrichs (Netherlands NCSC) & Derek Manky (Fortinet)
20:06
TIPS

TIPS#5 Ransomware and working with the FBI

Programme Separator
Grace Pagan (FBI) & Dave Eisenreich (FBI)
32:22
TIPS

TIPS#6 The use of dark patterns and psychological tricks in Android malware

Programme Separator
Anish Patil (SonicWall)
20:12
TIPS

TIPS#7 Incident response with an XDR

Programme Separator
Jerome Athias (TEHTRIS)
18:53
TIPS

TIPS#8 Where’s your data? Ransomware: protecting your ICS environment

Programme Separator
Kyle O'Meara (Dragos) & Anna Skelton (Dragos)
25:54
TIPS

TIPS#9 Fireside chat: Good times, bad times, you know I’ve had my share: resilience in today’s ever-evolving cybersecurity landscape

Programme Separator
Kathi Whitbey (Palo Alto Networks), Angie Wilson (Microsoft), Selena Larson (Proofpoint) & Jeannette Jarvis (Cyber Threat Alliance)
35:41
TIPS

TIPS#10 Peak Analyzer: an automated malware campaign detector

Programme Separator
Jason Zhang (VMware), Stefano Ortolani (VMware) & Giovanni Vigna (VMware)
21:30
TIPS

TIPS#11 New PlugX Fingerprint-THOR

Programme Separator
Mike Harbison (Unit 42 Threat Intelligence, Palo Alto Networks)
25:26
TIPS

TIPS#12 Keynote: Learning from failure: ransomware and future conflicts

Programme Separator
Matt Olney (Cisco)
19:38