Nation-State Moneymule's Hunting Season - APT Attacks Targeting Financial Institutions
Explore a comprehensive analysis of four recent APT campaigns targeting financial institutions in this 55-minute Black Hat conference talk. Delve into the intricate details of attacks on South Korean and EMEA banks, an ATM company, and Bitcoin exchange service providers. Gain insights into the malware, vulnerabilities, indicators of compromise (IOCs), and attack vectors employed by nation-state actors. Examine the Bluenoroff group's assault on a major Korean bank, the breach of an ATM operator company, and the hacking campaign against Bitcoin exchanges. Investigate a unique attack on an Egyptian bank and discover how threat actors utilize various delivery methods and decoys. Learn about the attackers' use of open directory browsing on command and control servers, their acquisition of new C&C infrastructure through Bitcoin, and their deployment of Monero miners. Analyze sample timestamps to understand the Andariel Group's activities and conclude with key takeaways from this in-depth exploration of sophisticated financial cybercrime. Read more