Digital Surveillance and Cyberespionage at Scale

Digital Surveillance and Cyberespionage at Scale

RSA Conference: Steven Adair, President, Volexity

Learn how OceanLotus, one of the most advanced and pervasive threat groups that is active today, manages its tracking, exploitation, and command and control operations around the world. There is a good chance you have been tracked by OceanLotus without even knowing it. This talk will show how a digital surveillance campaign can turn into a cyberespionage operation.Learning Objectives:1: Learn about an advanced threat group from a country you would not typically expect it from.2: Examine how APT groups are leveraging government and NGO websites to launch targeted attacks.3: See how legitimate cloud services are being abused by APT attackers to bypass security controls.Pre-Requisites:General understanding of what APT threats are, how exploits are used, what spear phishing is, etc.