Programme

VB2021 Programme

The 31st VB Conference is coming: it’s free, it’s online and it’s packed with features.

The fun starts in
0 Days
0 Hours
0 Minutes
0 Seconds

 

Please note: the programme is subject to change, and will be updated continuously up to the conference.

Day 01

Thursday 7 October, 2021

16:00 - 16:30 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Keynote: Breaking down barriers: using an intelligence mindset no matter who you are

Katie Nickels (Red Canary)
16:30 - 17:00 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Lyceum reborn: counterintelligence in the Middle East

Aseel Kayal (Kaspersky), Mark Lechtik (Kaspersky) & Paul Rascagneres (Kaspersky)
17:00 - 17:30 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Hackers-for-hire in West Africa: a threat actor spreads its wings

Donncha Ó Cearbhaill (Amnesty International)
17:45 - 18:15 UTC Thu 7 Oct 2021
LIVE PROGRAMME

How CARBON SPIDER embraced ransomware

Eric Loui (CrowdStrike) & Joshua Reynolds (CrowdStrike)
18:15 - 18:45 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Back to Black(Tech): an analysis of recent BlackTech operations and an open directory full of exploits

Sveva Vittoria Scenarelli (PwC) & Adam Prescott (PwC)
19:00 - 19:30 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Breaking modern software protectors through exploitation

Nino Isakovic (Microsoft) & Dart Torstino (Microsoft)
19:30 - 20:00 UTC Thu 7 Oct 2021
LIVE PROGRAMME

Reversing Go binaries with Ghidra

Dorka Palotay (CUJO AI) & Albert Zsigovits (CUJO AI)
20:00 - 20:30 UTC Thu 7 Oct 2021
LIVE PROGRAMME

“Fool Us!”, or is it “Us Fools!”? … 11 “Fools” years later…

Righard Zwienenberg (ESET) & Eddy Willems (G DATA)

Day 02

Friday 8 October, 2021

16:00 - 16:30 UTC Fri 8 Oct 2021
LIVE PROGRAMME

What cyber threat intelligence analysts can learn from Sherlock Holmes

Selena Larson (Proofpoint)
16:30 - 17:00 UTC Fri 8 Oct 2021
LIVE PROGRAMME

Who owns your hybrid Active Directory? Hunting for adversary techniques!

Thirumalai Natarajan Muthiah (Mandiant Consulting) & Anurag Khanna (CrowdStrike Services)
17:00 - 17:30 UTC Fri 8 Oct 2021
LIVE PROGRAMME

Multi-universe of adversary: multiple campaigns of the Lazarus group and their connections

Seongsu Park (Kaspersky)
17:45 - 18:15 UTC Fri 8 Oct 2021
LIVE PROGRAMME

Anatomy of native IIS malware

Zuzana Hromcová (ESET)
18:15 - 18:45 Fri 8 Oct 2021
LIVE PROGRAMME

Meet Indra: uncovering the hackers behind attacks on Iran Railways

Itay Cohen (Check Point) & Alexandra Gofman (Check Point)
19:00 - 19:30 UTC Fri 8 Oct 2021
LIVE PROGRAMME

NFT artists – a new prime target for cryptocurrency cybercrime?

Abril Rozwadowsky (Deloitte)
19:30 - 20:00 UTC Fri 8 Oct 2021
LIVE PROGRAMME

Mitigating exploits using Apple’s Endpoint Security

Csaba Fitzl (Offensive Security)
20:00 - 20:30 UTC Fri 8 Oct 2021
LIVE PROGRAMME

Arm’d and dangerous

Patrick Wardle (Objective-See)

On Demand

ON DEMAND

Operation Bookcodes – targeting South Korea

Tae-woo Lee (Korea Internet & Security Agency), Dongwook Kim (Korea Internet & Security Agency) & Byeongjae Kim (Korea Internet & Security Agency)
ON DEMAND

Android stalkerware: hunting automation, analysis and detection

Shankar Raman Ravindran (NortonLifeLock)
ON DEMAND

Bugs in malware – uncovering vulnerabilities found in malware payloads

Nirmal Singh (Zscaler) & Uday Pratap Singh (Zscaler)
ON DEMAND

The ‘ghost hand’ attack

Fabio Marenghi (Kaspersky) & Fabio Assolini (Kaspersky)
ON DEMAND

Ransomware: a correlation between infection vectors and victims

Doina Cosovan (Security Scorecard), Cătălin Liță (Security Scorecard), Jue Mo (Security Scorecard) & Ryan Sherstobitoff (Security Scorecard)
ON DEMAND

Endpoint security checkbox: a stealthy approach to cyberdefence

Nathaniel Adewole (Esentry System)
ON DEMAND

Reverse Android malware like a Jedi Master

Axelle Apvrille (Fortinet)
ON DEMAND

Your five most critical M365 vulnerabilities revealed and how to fix them (Partner Content)

Andy Syrewicze (Hornetsecurity)
ON DEMAND

STK, A-OK? Stopping messaging attacks on vulnerable SIMs

Cathal Mc Daid (AdaptiveMobile Security)
ON DEMAND

Evolution after prosecution: Psychedelic APT41

Aragorn Tseng (TeamT5), Charles Li (TeamT5), Peter Syu (TeamT5) & Tom Lai (TeamT5)
ON DEMAND

UNC788: Iran’s decade of credential harvesting and surveillance operations

Emiel Haeghebaert (FireEye)
ON DEMAND

LazyScripter: from Empire to double RAT

Hossein Jazi (Malwarebytes)
ON DEMAND

The baffling Berserk Bear: a decade’s activity targeting critical infrastructure

Joe Slowik (Gigamon)
ON DEMAND

CTO (Call Tree Overviewer): yet another function call tree viewer

Hiroshi Suzuki (Internet Initiative Japan)
ON DEMAND

Uncovering automatic Obfuscation-as-a-Service for malicious Android applications

Masarah Paquet-Clouston (GoSecure), Vit Sembera (Trend Micro), Sebastian Garcia (Stratosphere Laboratory) & Maria Jose Erquiaga (Cisco Systems)
ON DEMAND

From match fixing to data exfiltration – a story of Messaging as a Service (MaaS)

Robert Neumann (Acronis) & Gergely Eberhardt (Search-Lab)
ON DEMAND

Shades of Red: RedXOR Linux backdoor and its Chinese origins

Avigayil Mechtinger (Intezer) & Joakim Kennedy (Intezer)
ON DEMAND

Where is the cuckoo egg?

Ryuichi Tanabe (NTT Security (Japan) KK), Hajime Takai (NTT Security (Japan) KK) & Rintaro Koike (NTT Security (Japan) KK)
ON DEMAND

Hunting web skimmers with VirusTotal and YARA

Jérôme Segura (Malwarebytes)
ON DEMAND

Introducing subCrawl – a framework for the analysis and clustering of hacking tools found using open directories

Josh Stroschein (Independent researcher), Patrick Schläpfer (HP) & Alex Holland (HP)
ON DEMAND

Pay2Key – the newly discovered ransomware traced all the way to Iran

Gil Mansharov (Check Point) & Ben Herzog (Check Point)
ON DEMAND

Operation Newton: Hi Kimsuky? Did an Apple(seed) really fall on Newton’s head?

Jaeki Kim (S2W), Sojun Ryu (S2W) & Kyoung-ju Kwak (S2W)
ON DEMAND

A detailed analysis of a new version of Darkside ransomware (v. 2.1.2.3)

Vlad Pasca (LIFARS)
ON DEMAND

The keksec’s botnets we observed in the past year

Ye Jin (Qihoo 360) & Lingming Tu (Qihoo 360)
ON DEMAND

ShadowPad: the masterpiece of privately sold malware in Chinese espionage

Yi-Jhen Hsieh (SentinelOne) & Joey Chen (SentinelOne)
ON DEMAND

Security: the hidden cost of Android stalkerware

Lukas Štefanko (ESET)
ON DEMAND

All roads lead to Rome: the Conti manual leak dissection

Gabriela Nicolao (Deloitte) & Luciano Martins (Deloitte)
ON DEMAND

A deep dive into Water Roc, one of the most relentless ransomware groups

Feike Hacquebord (Trend Micro), Fernando Merčes (Trend Micro) & Ian Kenefick (Trend Micro)
ON DEMAND

Sandworm: reading the indictment between the lines

Anton Cherepanov (ESET) & Robert Lipovsky (ESET)
ON DEMAND

Threat hunting: from SolarWinds to Hafnium APT

Niv Yona (Cybereason) & Eli Salem (Cybereason)
ON DEMAND

When malware changed its mind: an empirical study of variable program behaviours in the real world

Erin Avllazagaj (University of Maryland, College Park), Ziyun Zhu (Facebook), Leyla Bilge (NortonLifeLock Research Group), Davide Balzarotti (EURECOM) & Tudor Dumitras (University of Maryland, College Park)

Workshops

WORKSHOP

Workshop: Analysing Android malware

Led by Vitor Ventura (Cisco Talos); hosted by Cisco Talos
WORKSHOP

Workshop: IoT hacking 101

Led by Zoltán Balázs (CUJO AI); hosted by IoT Village
WORKSHOP

Workshop: Modern threat hunting

Led by Vicente Diaz (VirusTotal); hosted by VirusTotal

Threat Intelligence Practitioners' Summit

TIPS#1 Keynote: The Community Effect

Samantha Madrid (Juniper)

TIPS#2 Now you see me, now you don’t

Jonas Walker (Fortinet)

TIPS#3 Operation Diànxùn: a cyberespionage campaign targeting telecommunication companies

Thibault Seret (McAfee) & Thomas Roccia (McAfee)

TIPS#4 Panel: A tale of two companies

Kathi Whitbey (Palo Alto Networks), Righard Zwienenberg (ESET), Noortje Henrichs (Netherlands NCSC) & Derek Manky (Fortinet)

TIPS#5 Ransomware and working with the FBI

Grace Pagan (FBI) & Dave Eisenreich (FBI)

TIPS#6 The use of dark patterns and psychological tricks in Android malware

Anish Patil (SonicWall)

TIPS#7 Incident response with an XDR

Jerome Athias (TEHTRIS)

TIPS#8 Where’s your data? Ransomware: protecting your ICS environment

Kyle O'Meara (Dragos) & Anna Skelton (Dragos)

TIPS#9 Fireside chat: Good times, bad times, you know I’ve had my share: resilience in today’s ever-evolving cybersecurity landscape

Kathi Whitbey (Palo Alto Networks), Angie Wilson (Microsoft), Selena Larson (Proofpoint) & Jeannette Jarvis (Cyber Threat Alliance)

TIPS#10 Peak Analyzer: an automated malware campaign detector

Jason Zhang (VMware), Stefano Ortolani (VMware) & Giovanni Vigna (VMware)

TIPS#11 New PlugX Fingerprint-THOR

Mike Harbison (Unit 42 Threat Intelligence, Palo Alto Networks)

TIPS#12 Keynote: Learning from failure: ransomware and future conflicts

Matt Olney (Cisco)