Name: Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft
Start: 2024-09-10T13:25:00Z
End: 2024-09-10T13:25:32.000Z
Location: BrightTALK
Rating: 0

We help protect organisations from today’s most pervasive cybersecurity threats. With us on your team, you’ll rest easy knowing your mission-critical assets are safe from threat actors.

Secureworks Counter Threat Unit™ Senior Security Researcher, Mark Osborn, examines China’s ongoing use of cyber intrusions to further its political, military, and economic aims. Mark sheds light on the use of cyber for intelligence collection by the Chinese state, taking a high-level look at the Chinese cyber threat landscape and digging down into specific examples of threat groups and their targeting methods. He also examines the role of the Chinese Communist Party (CCP), the main driving force behind intelligence collection.

In this informational webinar, you will:
 -- Learn about the structures in China responsible for cyber intrusions
 -- Gain insight into the evolution of China’s intelligence collection operations
 -- Discover whether your organization could be a prime target for Chinese espionage

Chinese Cyber Threats in the Age of the Xictionary

Secureworks® CTU™ experts provide an update on Operation CRONOS, the ongoing law enforcement disruption of one of the largest and most prolific ransomware groups of recent years, LockBit. This webinar will build on the detail provided in Episode 1 of Inside the Threat by discussing the most recent law enforcement action which uncovered links between LockBit and notorious Russian cybercriminal group, EvilCorp. 

CTU researchers will also look at the impact of this latest phase of Operation CRONOS on both the operators of LockBit and the wider ransomware ecosystem, providing practical advice for safeguarding your organization from ransomware.

In this informational webinar, you will:
  -- Gain insights into the latest developments in the ongoing disruption of LockBit and the newly discovered links to EvilCorp. 
  -- Discover how continued law enforcement activity has impacted the wider ransomware ecosystem and what this means for the threat landscape. 
  -- Learn how to protect your organization from ransomware attacks.

Inside the Threat: Secureworks CTU Analysis | Episode 4: LockBit Disruption Update

Many mid-market organizations face security-specific challenges as they grow. It’s not easy protecting an increasingly unique and complex environment without enough resources or staff to confidently keep up with the threats they are facing. So how can these organizations change from reactive to proactive to increase their vigilance, improve their resiliency, and gain strategic guidance to elevate their security programs? Unfortunately, many managed detection and response (MDR) solutions fall short of being able to provide a flexible and holistic solution that doesn’t break their cybersecurity budget.

This on-demand webinar covers the challenges mid-market companies face, what a more tailored MDR solution should deliver, and how Secureworks® Taegis™ ManagedXDR Plus builds on the strong foundation of MDR for significantly less than it would cost to accomplish similar outcomes internally.

How to Tailor Security with Limited Resources

In the last year, 90% of organizations have suffered identity breaches as cyber attacks involving identities grow more sophisticated and widespread(1). Organizations rely heavily on their identity infrastructure to enable collaboration, remote work, and access to internal systems. But the complexity and room for gaps and errors in these systems make it an attractive target for threat actors, posing significant risks across all sectors.

To manage user identities and control access to resources, most organizations use identity and access management (IAM) systems. It's not enough. Analysis of these systems uncovered that 95%(2) are misconfigured. These misconfigurations provide cybercriminals with opportunities to escalate privileges and leverage identities to further their attacks. While IAM systems are crucial to an organization's security strategy, they must be complemented by additional security layers to proactively combat these tactics. Identity threat detection and response (ITDR) can provide these additional layers, identifying risks and anomalies and detecting potential breaches early.

In this informational webinar, you will learn:
 • The current state of identity threats and the expanding identity attack surface
 • Why organizations benefit from identity threat prevention as well as detection and response
 • How ITDR can help safeguard against the escalating risks associated with identity threats

Sources:
1. Identity Defined Security Alliance (IDSA), 2023 Trends in Securing Digital Identities, July 2023
2. Calculated based on existing Secureworks customer data gathered from incident response

Stop Identity Attacks in Their Tracks: A Roadmap to Risk Reduction

From opportunistic cyberattacks to state-sponsored threats, join this webinar to learn the latest tools, tactics, and motivations behind today's cybercriminal threats.

By understanding the motivation of today’s cybercriminals, your organization will have the insight they need to build a blueprint for cyber resilience. Learn how to take a more effective and efficient approach to prevention, detection, and response to reduce your cyber risk.

This Informational Webinar will cover:
 • Threat actor behavior and motivation to help understand the latest trends in cybercrime
 • Real-world examples of how organizations have both fallen victim to and protected themselves from threats
 • How to strengthen your cyber-resilient programs with managed detection & response (MDR)

Build a Cyber-Resilient Organization: Know the Threat to Beat the Threat

Join Nash Borges, Head of Engineering, and Chris Yule, Director of CTU Capabilities, as they explore how integrating threat intelligence into security platforms enhances overall protection. 

This presentation highlights how embedding deep analytics and real-world insights can drive superior detection, deliver unmatched response, and ensure that your security investments provide maximum value.

Embedding Threat Intelligence for Super Security

Join Secureworks Global Threat Intelligence 2024 MC, Julia Belle, as she hosts a compelling fireside conversation with Cynthia Kaiser, Deputy Assistant Director, FBI Cyber; Will Lyne, Head of Cyber Intelligence at the UK National Crime Agency; and Don Smith, Vice President, Secureworks CTU.

This discussion will highlight the crucial role of international cooperation, public-private partnerships, and ongoing efforts to understand and counter the impact of cybercrime and cyber threats.

Fireside Chat: Bridging Borders in Cybersecurity

Wendy Thomas, CEO, covers the importance of threat intelligence and how it is crucial for securing your mission.

Global Threat Intelligence Summit 2024 Closing Remarks

Join in as Alexandra Rose, Director of Threat Intelligence and Government Partnerships, and Stacy Leidwinger, VP of Marketing, discuss how the CTU and threat intelligence help businesses maintain a defensible position amid increasing regulatory pressures.

Context Matters: Defending Your Business with Threat Intelligence

As threat actors increasingly use compromised systems and cloud-based platforms, the challenge for network defenders grows. The rapid turnover of this infrastructure, especially within shared or re-allocated cloud environments, makes detection and remediation more difficult. 

In this session, experts from Secureworks and Amazon Web Services (AWS) explore effective strategies to protect organizations from these evolving threats, focusing on the unique challenges and solutions within cloud-based environments.

Defending Against Dynamic Attacker Networks: Insights from AWS and Secureworks

As a newcomer to the dark web research team, Secureworks Threat Intelligence Knowledge Manager, Rebecca Taylor, relays her learnings after six months monitoring the criminal underground. Rebecca will share her experiences and insights on how employees’ digital footprints can make their way into the dark web and impact business security.

Musings from a Dark Web Newbie: Digital Footprints and Dark Web Insights

Tim Mitchell provides insights into the ever-evolving world of ransomware, highlighting how loyalties and tactics continue to change in the post-LockBit era.

The Shifting Sands of Ransomware

Chris Yule, Director of CTU Capabilities, leads a panel discussion featuring partners from Mimecast and SentinelOne, along with our own expert, Aiden Sinnott. The panel will explore the realities and misconceptions surrounding deepfakes, AI, business email compromise (BEC), and social engineering.

Deepfake Deep Dive: Truths and Myths in AI and Social Engineering

Presented by Director of Threat Intelligence, Rafe Pilling, this session explores the series of technical breadcrumbs and analytical pivots used to unmask an Iranian APT operator.

The Winding Road to Attribution

Mark Osborn examines China’s ongoing use of cyber intrusions to further its political, military and economic aims and answers the question, “How are China’s intelligence collection operations evolving?”

An A to Z of dominance: Chinese cyber threat in the age of the Xictionary

Don Smith, VP of the Counter Threat Unit, hosts a roundtable discussion with senior research experts Rafe Pilling, Sarah Kern, and Keith Jarvis, focusing on the latest threat trends, including state-sponsored attacks, credential compromises, ransomware, and more.

State of the Threat Roundtable

Adversary-in-the-Middle (AiTM) phishing attacks have notably increased in the past year, requiring new focus in customer defense strategies. This session will discuss how attackers use email or messaging services to intercept and manipulate communications between users and legitimate services. We’ll also explore the Axios AiTM campaign and how tools like Evilginx have been leveraged in these attacks, along with practical strategies to detect and prevent this growing threat.

Adversary-in-the-Middle (AiTM) Attacks: What You Need to Know

Take an in-depth look with us on the Contagious Interview campaign, a North Korean-led operation targeting freelance job candidates with malicious interview tasks. We’ll explore how threat actors use platforms like Fiverr, LinkedIn, and GitHub to infiltrate corporate networks, often by exploiting company-owned devices used by unsuspecting candidates. Attendees will gain insights into the campaign’s tactics, such as the use of malware-laden coding tasks and compromised video conferencing software, along with practical advice on how to defend against such social engineering threats.

A Freelance Job with a Side of Malware: Contagious Interview

Join Secureworks® CTU™ experts for an in-depth exploration of "Understanding Adversary in the Middle (AitM) Tactics and Credential Theft," a crucial topic for anyone concerned with protecting remote access solutions or SaaS applications. This webinar will unravel the complexities of AitM attacks, a sophisticated method used by threat actors to intercept and steal user credentials or tokens.

We will delve into the mechanics of these attacks, highlight real-world examples, and examine the tools and technologies employed by attackers. Additionally, we'll discuss effective strategies for detection, prevention, and response, providing practical advice to safeguard your organization. Don't miss this opportunity to enhance your understanding and fortify your defenses against one of the most insidious threats in the digital landscape.

In this informational webinar, you will:
· Gain insights into what AitM attacks are and why you need to watch out for these type of attacks
· Discover the various types of AitM attacks and how they work
· Learn how to protect your organization from AitM attacks

Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft

Extended Detection and Response

Threat Intelligence

Cyber Security

Cyber Threats

Threat Landscape

AitM

adversary in the middle attacks

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Inside the Threat: Secureworks CTU Analysis | Episode 3: Understanding AitM Tactics and Credential Theft

Presented by

About this talk

More from this channel