Keynote Address: Click Here to Hack Your Target: A Perspective on the Past...
summary
Machine-disguised EXE files using the Unicode right‑to‑left trick and fake JPG icons reveal FinFisher infections that phone home to Batelco IPs; researchers fingerprint C2 servers by decoy HTTP headers and traced proxy chains to 21 suspected government customers. Zero‑click media bugs (JBIG2, WebP, DNG) and a Vodafone Egypt border middlebox enable Sitrox/Predator injections. A 2019 bug collision gives a roughly 70–75 day window where NSO’s Pegasus zero‑click vector pauses, showing exploit disclosure can interrupt real campaigns.
AI-written summary · about
chapters (8)
- 0:00Mercenary spyware research
- 6:11Origins of mercenary spyware
- 10:49Spyware infrastructure evolution
- 16:07Zero-click era threats
- 25:36AI in spyware attacks
- 31:16Targeted vs mass surveillance
- 37:47Defensive strategies
- 44:09Why mercenary spyware unsafe
related talks
49mEffects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger
01h 09mKeynote: An Unauthorized Exchange - From Targeted Espionage to the Global Cyber Pandemic
54mmacOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs
42mKeynote: The Expanding Universe of Cyber Threats
34mKeynote: Multiplying Threat Intelligence
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
20mKeynote: Outsmarting IoT Defense: The Hacker's Perspective
49mThe State Of Malware From The Eye Of The Tiger