Some of the most recognized artists began their career by copying other artists and creating convincing forgeries. Leveraging the parallels between the art of forgery and the art of offensive security, we will study Fancy Bear (APT28) using freely available intelligence sources to create a convincing forgery of their malware, X-agent, for defenders to study. The audience of this talk is defenders wanting to conduct threat emulation of a specific threat actor on a starving artist budget.

Back to GrrCON 2019 video list