The rise and rise of advanced eCrime threat - Incident Response edition

The cyber security industry has traditionally used the term Advanced Persistent Threats (APTs) to describe the highest level of threats from nation-states, known by their sophisticated and relentless attacks against organisations. eCrime threats were viewed as only opportunistic and less. However, in recent months, certain eCrime groups have started targeting large organisations with remarkable speed and aggression, employing advanced and lesser-known tactics to reap substantial financial gains. These groups have significantly advanced their techniques, remaining hidden until the last moment and engaging in knife fights with defenders when necessary.

In this talk, I'll delve into the tactics, techniques, and procedures (TTPs) that these eCrime threat actors are employing, and discuss strategies for detecting, defending against, and responding to them. This talk is a fast-paced exploration of the evolving landscape of advanced eCrime threats and how defenders can stand their ground when the heat is on.

Through this talk, we will use the knowledge of actual attacks that have devastated large organisations to learn from these events to talk through ways of performing effective incident response.