Evolution of APTs Through the Supply Chain
summary
The talk examines how state-sponsored APT groups have shifted to supply-chain attacks that silently compromise software providers and IT service suppliers to infect millions of devices. It analyzes cases like the Barium backdoor (and contrasts with WannaCry) to trace operations dating back to 2011, explain why supply-chain compromise is an effective strategy, and discuss how such trusted-source threats can be identified.
AI-written summary · about
chapters (9)
- 0:00APTs in supply chain
- 1:14Why APTs target supply chain
- 5:00Opportunistic attacks at scale
- 12:27Targeted mass attacks
- 19:49Fourth-party intelligence collection
- 27:11Geopolitical attack strategy
- 30:26Evolution of Chinese tactics
- 34:18Identifying these attacks
- 36:26Q&A
related talks
16mThe Rise of Supply Chain Attacks
51mThe Enemy Within: Modern Supply Chain Attacks
25mSupply Chain Attacks
58mAttacking through the Software Supply Chain
51mThe Magic World of Advanced Persistent Threats
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
50mLinked-Out: Security Principles to Break Software Supply Chain Attacks
37mSupply Chain Attacks and the Future of Software Delivery