Chats, Cheats and Cracks - Abuse of Collaboration Platforms in Malware Campaigns

Explore a conference talk from OISF 2021 examining the exploitation of collaboration platforms like Discord and Slack in malware campaigns. Delve into the methods used for malware distribution, delivery, and command and control through these platforms. Learn about specific malware campaigns, including email examples, component retrieval, and persistence techniques. Investigate the use of webhooks, access tokens, and other platform-specific features for malicious purposes. Gain insights into business protections and Cisco Talos' findings on these threats. Conclude with audience questions and a discussion on CPEC use in this context.