Backdoor Investigation and Incident Response - From Zero to Profit

Explore a real-world case study of a sophisticated cyber attack on an online gaming company in this 40-minute Black Hat conference talk. Delve into the investigation of an incident where attackers gained unauthorized access to a transactional database, manipulating gaming transactions to their advantage. Discover how the breach occurred despite recent security upgrades, and learn about the stealthy backdoor that went undetected for 8 months. Gain insights into the attack methodology, indicators of compromise, and the financial motivations behind such intrusions. Understand the challenges faced during the incident response process and the techniques used to uncover additional compromised servers, ultimately preventing millions in daily losses for the company. Acquire valuable knowledge on improving detection capabilities and strengthening defenses against similar attacks in the gaming industry and beyond.