BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//sched.securitybsides.org.uk//bsides-london-2023//speaker
 //FL3EMT
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-QUZNU7@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T115000
DTEND;TZID=GMT:20231209T123500
DESCRIPTION:Email-based attacks remain at the forefront of the cybersecurit
 y threat landscape\, ever-evolving to circumvent defenses and trick unsusp
 ecting users. In this presentation\, we will discuss the nuances of the la
 test trending social engineering techniques including QR codes\, image-as-
 content attacks\, HTML Smuggling SVGs\, and more. We will examine several 
 real-world examples\, discuss attacker objectives\, and explore the tactic
 s used to make them appear legitimate. Additionally\, we will discuss meth
 ods of detection and prevention by analyzing signals unique to these attac
 ks.\n\nThe pervasiveness of QR codes in daily life\, combined with the eas
 e of generating them\, presents unique security challenges. Their quick-sc
 an nature means users often trust and act on them without the scrutiny giv
 en to URLs. Moreover\, most traditional email security systems are geared 
 towards analyzing text-based content\, making QR-encoded URLs slip through
  undetected.\n\nIn parallel\, attackers are leveraging images to embed the
  text of their attacks. Since many email security scanners rely on analyzi
 ng suspicious text and URLs embedded directly in the body of messages\, at
 tackers are often able to bypass traditional detection.\n\nAttendees will 
 come away from this talk with a better understanding of the latest email t
 hreats and the methods they can use to protect themselves and their organi
 zations against them.
DTSTAMP:20260715T223841Z
LOCATION:Clappy Monkey Track
SUMMARY:Game of Codes: QR Thrones\, Image Battles\, and the Quest for Initi
 al Access - Josh Kamdjou
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/QUZNU7/
END:VEVENT
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-R9M9BG@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T130000
DTEND;TZID=GMT:20231209T170000
DESCRIPTION:Email remains the #1 initial access vector for commodity malwar
 e and nation state actors. Historically\, tackling email-based threats has
  been considered the purview of black-box vendor solutions\, with defender
 s having limited scope (or tooling!) to swiftly and effectively respond to
  novel offensive tradecraft.\n\nIn this training\, attendees will be given
  detailed insight into the latest techniques used to deliver prevalent mal
 ware strains\, including QakBot and Emotet\, and will hunt through email d
 ata to identify this malicious activity\, developing rules to detect and b
 lock these attacks.\n\nInitially attendees will be introduced to the found
 ational technologies that enable threat hunting and detection engineering 
 in the email domain\, before being given access to the email data of a fic
 titious company seeded with benign and real-world attack data.\n\nAttendee
 s will be guided through the rule creation process\, utilizing free and op
 en detection engines including Sublime and Yara\, and will be introduced t
 o the signals that can be used to craft high-fidelity rules\, including se
 ntiment analysis\, domain age\, and attachment analysis. Having completed 
 the training\, attendees will have a strong understanding of the tools and
  techniques at their disposal to defend their organizations from all manor
  of email threats.
DTSTAMP:20260715T223841Z
LOCATION:Workshop Room 5
SUMMARY:Email Detection Engineering and Threat Hunting - Josh Kamdjou\, Alf
 ie Champion
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/R9M9BG/
END:VEVENT
END:VCALENDAR