Malware Courses and Certifications

OWASP Foundation

No Code You Shall Use, Malware You Shall Get - Security Risks in Low-Code/No-Code Platforms

Explore security risks in Low-Code/No-Code platforms' marketplaces, including malicious components and vulnerabilities. Learn about potential threats and see demonstrations of outcomes from compromised LCNC components.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

OWASP Foundation

Serverless Infections - Malware in Serverless Computing Environments

Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

OWASP Foundation

Modern Malvertising and Malware Web-Based Exploit Campaigns

Explore modern malvertising and web-based exploit campaigns, including top malware types, real-world attack breakdowns, and emerging threats in this technical presentation on cybersecurity.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Black Hat

Deception at Scale - How Malware Abuses Trust

Explore techniques used by attackers to disguise malware as legitimate, including stolen certificates and hiding malicious files in trusted applications.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

EuroPython Conference

pip install malware

Live demonstration of creating and installing malware from PyPI, highlighting security risks in package dependencies and emphasizing the importance of vigilance when using external libraries.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Its Malware Time - A Bar Crawl from Skunked Homebrew to Rotten Apples

Explore the evolution of malware through real-world examples, from initial infection to advanced techniques. Learn detection and prevention strategies for various attack vectors.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Dragos: ICS Cybersecurity

The Impact of FrostyGoop Modbus Malware Attacks on Connected OT Systems

Explore the FrostyGoop malware attack on energy systems, its impact on heating services, and strategies to protect critical infrastructure from emerging cyber threats in industrial control systems.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

x33fcon

Mobile Device Security Threats: Malware Distribution and Corporate Vulnerabilities - Lecture 3

Explore mobile device security vulnerabilities and malware threats like Pegasus, understanding how personal phones can compromise corporate cybersecurity through various attack vectors and data extraction methods.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Jamf

Bypassing Gatekeeper - Analyzing macOS Security Flaws and Malware Bypass Techniques

Explore macOS Gatekeeper vulnerabilities, including BOM and Launch Services flaws, while learning detection strategies using Apple's Endpoint Security API to strengthen defenses against malware threats.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

x33fcon

Draw Me a Virus - Proactive Threat Intelligence in the Era of AI-Generated Malware

Explore how AI-generated malware evades detection and learn proactive threat intelligence strategies to anticipate and counter emerging AI-driven cyber attacks.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Security Vibe Check - Which Malware Are You?

Discover your security habits through a fun quiz matching your coding practices to iconic supply chain attacks while learning practical security posture improvements.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Your Silent Software Saboteur - Open Source Malware

Uncover stealthy tactics of weaponized open source components infiltrating software supply chains and learn proactive defense strategies to block malicious threats.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

NorthSec

Technical Analysis in Malware Reverse Engineering - Past, Present, and Future

Dive into advanced malware reverse engineering techniques, from efficient unpacking methods to automation tools, guided by over a decade of practical experience in threat analysis.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

SANS

The Secret Life of Forgotten Malware Command and Control (C2) Domains

Explore the intriguing afterlife of exposed malware command and control domains, their continued value for threat actors and defenders, and the surprising insights from monitoring these supposedly burned assets.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

RSA Conference

Weaponized Malware vs. Encryption and Exfiltrating Data from Signal Messenger

Uncover how weaponized malware infiltrates phones, bypasses encryption, and extracts data from Signal Messenger to defend against advanced surveillance tactics.

• YouTube
• 58 minutes
• Self-Paced
• Free Video