Big Game Hunting - The Peculiarities of Nation-State Malware Research
Explore the intricacies of nation-state malware research in this 50-minute Black Hat conference talk. Delve into the peculiarities of investigating state-sponsored cyber espionage with experienced threat analysts. Examine case studies of high-profile malware like Regin and Babar to understand attribution challenges. Learn about the difficulties in attributing commercially written offensive software and vendor responses. Discover a novel approach for creating credible links between binaries from the same group of authors, enhancing transparency in attribution. Gain insights into the attribution problem, misconceptions about open-source information, and the complexities of the threat intelligence business. Analyze features from various domains to compare malware "handwriting" and evaluate vendor statements critically.