Advanced Persistent Threats Courses and Certifications

USENIX Enigma Conference

The State of the Stalkerware - Eva Galperin - USENIX Enigma Conference - 2020

Eva Galperin discusses recent efforts to combat stalkerware, a covert surveillance tool often used in domestic abuse. She highlights initiatives by security companies, tech giants, and support organizations to protect victims.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

DefCamp

Catch Me If You Can – Finding APTs in Your Network - DefCamp - 2018

Explore advanced persistent threats (APTs), their attack mechanisms, and detection strategies. Learn threat hunting techniques to uncover hidden network vulnerabilities and enhance cybersecurity defenses.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Association for Computing Machinery (ACM)

Attacking Information Mismanagement in SDN-Datastores

Explore vulnerabilities in Network Management Datastore Architecture, focusing on SDN infrastructures. Learn about semantic gaps, fuzzing techniques, and mitigation strategies for DoS and misconfiguration attacks.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Cooper

Digital Vengeance - Exploiting Notorious C&C Toolkits

Explore techniques for exploiting notorious Remote Administration Tools used in targeted attacks, turning the tables on sophisticated adversaries and exposing vulnerabilities in their command and control systems.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Dissecting Phishing Techniques of CloudDragon APT

Análisis detallado de las sofisticadas técnicas de phishing del grupo APT norcoreano CloudDragon, incluyendo casos reales, métodos para evadir la autenticación de dos factores y propagación a sistemas Android.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Activities of the Tick Cyber Espionage Group Over the Last 10 Years

Comprehensive analysis of the Tick cyber espionage group's decade-long activities, focusing on their tactics, malware, and impact on East Asian targets, particularly in Korea and Japan.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

RSA Conference

Nation-State Espionage - Hunting Multi-Platform APTs on a Global Scale

Explore the evolution of cyber-warfare and nation-state espionage, focusing on a global APT actor exploiting multiple platforms. Learn about threat detection, actor identification, and emerging cyber capabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

BSidesLV

Remote Access, the APT

Explore advanced persistent threats and remote access techniques in cybersecurity. Learn about cutting-edge strategies for detecting and mitigating sophisticated network intrusions.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

LASCON

Burning Down the Haystack to Find the Needle

Explore network flow pattern analysis to detect and prevent contemporary threats, and learn how to build a security analytics program for enhanced threat visibility and response.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Operation SemiChimera

Análisis detallado de ataques APT a la industria de semiconductores en Taiwán, enfocándose en Operation SemiChimera. Explora técnicas, tácticas y motivaciones de los atacantes, ofreciendo insights para mejorar la ciberseguridad del sector.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

KLara - Your New Friend

Cloud-based Yara scanner for efficient malware detection. Scans large malware libraries at high speeds, enhancing threat intelligence and APT hunting capabilities. Open-source project with live demo.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Anatomy of an APT Attack

Explore tactics of APT attacks, including state-sponsored hackers and organized crime. Learn about real-world compromises, remediation processes, and the global impact of cybercrime.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Kaspersky

Endless Gunfire in South Korea

Análisis de un ataque APT en Corea del Sur, explorando exploits personalizados, tácticas y técnicas utilizadas por los actores de amenazas en diferentes etapas del ciclo de vida del ataque.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Black Hat

Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild

Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

RSA Conference

Cyberespionage - Targeted Attacks Abusing Third-Party Cloud Services

Explore how APT groups exploit cloud services for cyberespionage, examining real-world cases, attack strategies, and implications for defenders and researchers across Windows and Android platforms.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk