Cyberespionage - Targeted Attacks Abusing Third-Party Cloud Services

Explore a 28-minute conference talk from RSA Conference that delves into the exploitation of third-party cloud services in targeted cyberespionage attacks. Examine multiple Advanced Persistent Threat (APT) cases worldwide, uncovering which cloud services were compromised, the motivations behind these attacks, and the methods employed. Gain insights into the advantages and disadvantages of such exploits from the perspectives of malware developers, organizational defenders, and threat researchers. Analyze both Windows and Android malware cases, covering topics such as APT groups, BadNews, Swiss Knife, Twitter Chat, CloudStash, Telegram, and File Denial techniques.

Intro
Outline
APT Groups
BadNews
Swiss Knife
Twitter Chat
CloudStash
Telegram
File Denial