BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//sched.securitybsides.org.uk//bsides-london-2023//talk//Q
 UZNU7
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-QUZNU7@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T115000
DTEND;TZID=GMT:20231209T123500
DESCRIPTION:Email-based attacks remain at the forefront of the cybersecurit
 y threat landscape\, ever-evolving to circumvent defenses and trick unsusp
 ecting users. In this presentation\, we will discuss the nuances of the la
 test trending social engineering techniques including QR codes\, image-as-
 content attacks\, HTML Smuggling SVGs\, and more. We will examine several 
 real-world examples\, discuss attacker objectives\, and explore the tactic
 s used to make them appear legitimate. Additionally\, we will discuss meth
 ods of detection and prevention by analyzing signals unique to these attac
 ks.\n\nThe pervasiveness of QR codes in daily life\, combined with the eas
 e of generating them\, presents unique security challenges. Their quick-sc
 an nature means users often trust and act on them without the scrutiny giv
 en to URLs. Moreover\, most traditional email security systems are geared 
 towards analyzing text-based content\, making QR-encoded URLs slip through
  undetected.\n\nIn parallel\, attackers are leveraging images to embed the
  text of their attacks. Since many email security scanners rely on analyzi
 ng suspicious text and URLs embedded directly in the body of messages\, at
 tackers are often able to bypass traditional detection.\n\nAttendees will 
 come away from this talk with a better understanding of the latest email t
 hreats and the methods they can use to protect themselves and their organi
 zations against them.
DTSTAMP:20260714T124839Z
LOCATION:Clappy Monkey Track
SUMMARY:Game of Codes: QR Thrones\, Image Battles\, and the Quest for Initi
 al Access - Josh Kamdjou
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/QUZNU7/
END:VEVENT
END:VCALENDAR
