Name: Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41
Start: 2024-05-14T09:00:00Z
End: 2024-05-14T09:00:35.000Z
Location: BrightTALK
Rating: 0

Lookout is an integrated endpoint-to-cloud security company. Our mission is to secure and empower our digital future in a privacy-focused world where mobility and cloud are essential to all we do for work and play. We enable consumers and employees to protect their data, and to securely stay connected without violating their privacy and trust. Lookout is trusted by millions of consumers, the largest enterprises and government agencies, and partners such as AT&T, Verizon, Vodafone, Microsoft, Google, and Apple. Headquartered in San Francisco, Lookout has offices in Amsterdam, Boston, London, Sydney, Tokyo, Toronto and Washington, D.C. To learn more, visit www.lookout.com.

In the enigmatic world of cloud computing, shadow IT apps are elusive phantoms, slipping through the cracks and creating a web of confusion. If you're finding your digital landscape overrun with these mysterious intruders, join us as we unravel the secrets of how to detect, control, and secure your cloud environment.

In this suspenseful webinar, you’ll embark on a thrilling investigation to:
- Uncover Shadow IT Mysteries: Learn how to identify the covert apps and services that are operating under the radar. We'll reveal the techniques to expose these hidden culprits before they can wreak havoc.
- Evaluate and Block High-Risk Sites: Delve into the detective work needed to assess and block access to risky sites and applications. Protect your digital realm from the dangers lurking in these uncharted territories.
- Implement DLP to Guard Your Secrets: Discover how to use Data Loss Prevention (DLP) strategies to ensure your sensitive information stays hidden from these unsanctioned apps. Keep your data secure and prevent it from slipping into the wrong apps.

Prepare for a dive into the cloud’s shadowy corners as we piece together the puzzle of rogue apps and ensure your data remains protected. Don’t miss this chance to crack the case and secure your cloud environment against digital mysteries and mischief. Join us and solve the cloud chaos caper with expert precision!

The Cloud Chaos Caper: Reining In Your Rogue Shadow IT Apps

2024 saw a surge in cyberattacks alongside rapid tech advancements, making it clear that staying ahead in the digital world is more important than ever.

In this exclusive webinar, we’ll explore the top cybersecurity predictions for 2025 — highlighting emerging threats, key trends, and the latest strategies for fortifying your defenses.

Join our expert panel as they share valuable insights and predictions on:
- New ransomware tactics and data breach methods
- How AI is shaping both security solutions and cyberattacks
- Growing threats from nation-states
- The latest security regulations and compliance frameworks

Cybersecurity Predictions: A Look into 2025's Security Landscape

In the wild frontier of remote work, your data is the prized loot everyone’s after. As the digital outlaws get bolder, ensuring your information stays locked up and safe is more crucial than ever. Saddle up and join us for a showdown on how to protect your virtual gold from the bandits of the information age!

In this high-stakes webinar, you’ll learn how to:
- Clientless Access: Discover how to control access to your SaaS and private apps without the need for client-side installations, keeping the outlaws from sneaking in through the back door.
- Device Posture Checks: Learn how to assess and enforce device security standards, ensuring only the most secure contraptions get access to your stash.
- Data Protection: Master the art of masking, encrypting, and decrypting sensitive data, so even if someone manages to make off with them, the loot remains locked in your treasure chest.

Gear up to defend your digital frontier and keep your data from falling into the wrong hands. This webinar is your chance to outwit the modern-day desperadoes and keep your remote work secure. Don’t let the outlaws run off with your digital gold—join us and secure your digital ranch!

The Great Remote Work Data Heist: How to Keep Your Info Secure

In a world where email is a channel for confidential communication, safeguarding your messages from prying eyes is crucial. If you’re tired of worrying about who’s peeking at your emails or if your attachments are wandering off without your permission, this webinar is your digital bodyguard, ready to swoop in and save the day!

In this session, you'll discover how to:
- Mask Confidential Information: Learn the art of email sleight-of-hand! We’ll show you how to keep the sensitive info within your messages hidden from prying eyes
- Remove Unauthorized Recipients: Become a master of email bouncers! Find out how to kick out those unwanted guests from your email threads, ensuring only the right people are in the loop.
- Encrypt Attachments: Arm your attachments with high-tech security! We’ll teach you how to encrypt your files so they stay sealed tight, making sure only the right eyes can see them.

Don’t let your emails become an open book! Join us to boost your email security skills and turn your inbox into a fortress of confidentiality. With our tips and tricks, you’ll keep your messages private and your mind at ease.

Mastering SSE | Email Eavesdroppers: Keeping Your Messages Private

As cyber criminals increasingly exploit mobile devices to breach cloud environments, security strategies for 2025 must prioritize mobile threat intelligence. This webinar explores new findings on advanced threats from China and Russia, demonstrating how mobile endpoints are leveraged in the modern kill chain to compromise cloud data. Learn why Mobile Endpoint Detection and Response (EDR) is essential in 2025 and how to stay ahead of evolving threats. Get actionable insights and strengthen your defenses against the rising tide of mobile-enabled cyberattacks.

2025 Security Planning: How to Utilize Mobile Threat Intelligence to Protect Cloud Data

Why Does My CEO Want My Password? Cybercriminals are impersonating senior executives and IT teams to trick employees into sharing critical sensitive information and corporate credentials. With one usable set of credentials, attackers can quietly access your cloud infrastructure and compromise data undetected. What’s worse is that you often don’t know when your employees are being targeted - making it impossible to proactively defend against these threats. 

Join this 30-minute webinar to learn: 

- How cybercriminals are modernizing their tactics to compromise entire organizations through a simple text message. 
- Why visibility into the initial steps of a modern attack is crucial to protecting data.
- How Lookout protects against executive impersonation and smishing attacks.

Lookout & Verizon: Executive Impersonation and Smishing Attacks Explained

Designed for traditional network architectures, VPNs are an outdated solution that no longer meet the security needs of today’s remote, multi-cloud environments. They are difficult to scale, complex to manage, impact user performance, and are full of vulnerabilities. 

As a result, zero trust architectures have become a security requirement for every organization to protect sensitive data and applications. Although necessary, it is seemingly complex to implement and maintain across environments where data and access flow between different apps, devices, and networks.

Join our upcoming session where you'll learn:

- Why traditional VPNs are falling short: Understand the limitations and vulnerabilities of VPNs and how they can expose your organization to risks.

- The importance of zero trust: Discover how a zero trust approach can help you reduce the risk of data breaches, prevent unauthorized access, and protect sensitive information.

- How to replace VPNs with zero trust access: Learn about Lookout Secure Private Access, a solution that provides continuous zero trust access, secure remote access without a VPN, granular access control, application cloaking, and enhanced network visibility and control.

- Best practices for implementing zero trust: Get expert guidance on how to successfully adopt a zero trust strategy and overcome common challenges.

Goodbye VPN, Hello ZTNA: Secure Your Organization with Zero Trust

In today's digital landscape, organizations face an ever-evolving array of cyber threats. From sophisticated phishing attacks to data breaches, the risks are real and substantial. Cloud-based Secure Web Gateways (SWG) have evolved to become a critical tool to safeguard businesses from these advanced attacks.
Join this session to learn how SWGs can address the complex challenges of today's security landscape. Discover the importance of a modern SWG solution and how it keeps organizations, employees, and customer data safe through:

URL & Content Filtering: Block access to malicious websites and content, ensuring compliance and enhancing employee productivity.

Zero-Day Phishing Protection: Safeguard users from phishing scams and malicious web content with Remote Browser Isolation capabilities.

Data Loss Prevention: Protect against data leakage through web channels, including Shadow IT detection and GenAI platforms.

Learn how Secure Internet Access — Lookout's next-gen SWG solution — stands out in providing comprehensive protection against advanced threats.

Defending Against Advanced Threats with a Modern Secure Web Gateway

In a digital landscape where cloud storage leaks are as common as a forgotten password, safeguarding your data is more important than ever. If you're tired of your files slipping through the cracks and making unplanned escapes, this webinar is here to help you seal those gaps with confidence!

In this session, you will learn how to:
- Restrict Public File Sharing: Learn the art of keeping your files from accidentally moonlighting on the internet, and discover best practices to manage public sharing without compromising security.
- Safeguard Sharing with External Users: Uncover the secrets to securely sharing files with external partners, vendors, or collaborators.
- Maintain Compliance: Delve into the essentials of ensuring your cloud storage data stays compliant with your security policies.

If you want to ensure your data doesn’t end up on a wild adventure, this webinar will equip you with the tools and tricks to keep your cloud storage secure and your data firmly in check.

Topics: 
- Public file sharing
- External sharing: implicit/explicit shares
- Compliance: Cloud data discovery

Mastering SSE | Cloud Leaks: Plugging The Holes Before Your Data Goes Rogue

Implementing Zero Trust Network Access (ZTNA) can sometimes feel like solving a Rubik’s Cube blindfolded. But what if you had cheat codes to make it all easier? This webinar is here to show you how to implement ZTNA with the simplicity of a game hack. 

In this session, you will:
- Discover how to effortlessly deploy ZTNA using an integrated, step-by-step workflow that makes setting up your solution feel like a walk in the park.
- Learn how to seamlessly identify and secure the private resources your users need access to, without breaking a sweat.
- Get the lowdown on creating and implementing adaptive access policies that adjust to your users' needs and behaviors, all while keeping security tight.

If you want to streamline your ZTNA setup and make deployment so simple it feels like you’ve unlocked the ultimate cheat code, this webinar will arm you with everything you need to win the game.

Topics: 
- Walk through VPN Deployment workflow

Mastering SSE | ZTNA: So Easy, It Feels Like Cheating

In an era where Generative AI (GenAI) is taking over our business operations like an overzealous ruler, ensuring your data is protected is more crucial than ever. Join us to discover the essential strategies for keeping your data safe from the increasingly ambitious plans of our GenAI overlords!

In this session, you will:
- Learn how to effectively audit and monitor GenAI interactions to identify potential risks and ensure compliance with data protection regulations.
- Explore methods to prevent unauthorized access to GenAI platforms, ensuring that only vetted and approved tools are used within your organization.
- Implement robust DLP strategies to prevent sensitive information from being inadvertently shared or exposed through GenAI interfaces.

Get the knowledge and tools needed to navigate the complexities of data protection in the age of GenAI. Don’t miss this opportunity to fortify your organization’s data security posture and stay ahead of emerging threats.

Topics: 
- Audit: How many users are using GenAI tools
- Block GenAI
- Block GenAI/Exception for ChatGPT
- Allow GenAI/Restrict PII

Mastering SSE | Protect Your Data From the GenAI Overlords

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorized access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Turning the Tables on Adversaries: Enhance Your SOC Playbooks With Mobile

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorised access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Modern breaches now happen in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure with legitimate credentials and swiftly compromise data. Recent high-profile attacks are evidence of this including MGM Resorts, Caesars Entertainment, Twilio, and many others.

Join us for this 30-minute presentation to learn:
- How the traditional cyber kill chain has evolved to exploit mobile users
- Key findings from Lookout's Q1 Mobile Threat Landscape Report
- What makes your organization vulnerable to a modern-day attack
- Why automated defenses are essential
- How Lookout protects its customers from these types of attacks

Information Week Hosts Tales of a Modern Data Breach: The Rise of Mobile Attacks

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your organization safe.

Interactive Workshop: Hunt for Threats with Lookout Researchers

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your data secure

Your employees are using a diverse mix of cloud apps, private apps, personal networks, and unmanaged endpoints — making it difficult for your IT and security teams to have complete visibility into where your data resides. So how do you know all of your cloud data is protected?  

Your teams are now asked to secure an extremely complex environment, oftentimes with traditional point solutions that are siloed, difficult to manage, and lack built-in data and endpoint protection.

What’s the problem? Increased security risks, operational costs, and potential for human error.

Your solution? A data-centric cloud Security Service Edge (SSE) platform to simplify your security posture and lower costs.

Join our upcoming session where you'll leave with a confidence in understanding in:

- The major benefits of a unified SSE platform
- How to gain full visibility and control across your entire IT infrastructure
- Ditching the complexity of managing multiple security products and policies for a unified, cloud-based approach

Conquer Cloud Security Complexity: Unify Visibility & Control with SSE

How Lookout Protects Against the Modern Day Kill Chain

The Modern Kill Chain: How Attacks Have Gone From Months to Minutes

The Modern Kill Chain: What is it and How to Protect Against It

Scattered Spider: The cybercrime group behind the MGM Resorts data breach costing an estimated $100 million. 
APT41: A notorious Chinese APT that recently developed two mobile surveillanceware tools, WyrmSpy and DragonEgg, to target over 100 public and private sector organizations.

These two groups represent a global shift among threat actors – focusing on mobile devices to quietly compromise credentials, apps, and data. Join Tyler Croak, Principal Strategist at Lookout, and Ken Saganowski, Director of Technical Advisory at MOXFIVE, in this 30-minute session, to learn: 
 
- How the traditional kill chain has evolved 
- What modern tactics are being used to trick your users
- What happens after an attacker gains access - A real-life Scattered Spider example
- How to detect an intruder in your system
- What immediate actions you can take today to protect data in 2024

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Cyber Security

Information Security

Cyber Attacks

Cloud Security

IT Security

Threat Detection

Data Protection

Incident Response

Data Security

Threat Analysis

Get powerful HR legislation insights that will help you safeguard your business and workforce. Connect with thought leaders and colleagues to get the most up-to-date knowledge on legislations you need to be aware of.

Legislation

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Presented by

About this talk

More from this channel