CONFidence 2022: Sockbot in GoLand - Linking APT actors with Ransomware.. - Ido Naor & Felipe Duarte

Sockbot in GoLand - Linking APT actors with Ransomware Gangs

Our incidental consequence squad had responded to malicious activity in 1 of our clients' network infrastructure. The tools we found in the incidental have been utilized in the past by multiple threat actors, including nation-state sponsored and the attack was identified as a suspected ransomware by alleged Russian ransom gangs. This talk will tell the communicative behind a highly complex incident, and how we lived to tell.

Website: https://confidence-conference.org
Facebook: https://www.facebook.com/confidence.conference
Twitter: https://twitter.com/confidenceconf