Phishing? — No Thanks. How the Landscape of APT Techniques and Tactics Has Changed
summary
A presenter examines how APT groups are shifting away from phishing toward using zero-day exploits and supply-chain attacks. The talk uses real-world examples and day-to-day cyber threat intelligence observations to illustrate those changing techniques and tactics.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:28KNF attack example
- 5:41Phishing no longer effective
- 13:28What are APT groups?
- 15:16SolarWinds supply chain attack
- 18:27Medok software house attack
- 22:02SEO poisoning threats
- 27:20Domain poisoning and Polyfill.io
- 31:57DNS poisoning and Quad7 botnet
- 37:12Zero-click Outlook attacks
- 38:57Wi-Fi neighbor attack
- 41:04Summary and recommendations
related talks
49mDo Attackers Use Algorithms to Evade ML? An In-the-Wild Phishing Case Study
39mEvolving Your Defense: Making Heads or Tails of Threat Actor Trends
55mPhishing: The War of Infinity
38mEvolution of APTs Through the Supply Chain
06mSoK: Still Plenty of Phish in the Sea — A Taxonomy of User-Oriented Phishing
30mEvasive Maneuvers: Trends in Phishing Evasion & Anti-Evasion
49mThe Death of Conventional MFA: How AiTM Attacks Are Changing the Game
51mThe Magic World of Advanced Persistent Threats