SLEUTHCON is coming!!! Registration and CFP are now open for this year's SLEUTHCON! This year's keynote will be given by Bryan Vorndran, FBI's Assistant Director Cyber Division. We are virtual and in-person in Arlington, VA on May 24th! 1/x
Registration and Call for Papers is now open for SLEUTHCON! From the folks who brought you CYBERWARCON, SLEUTHCON (formerly BRUNCHCON) is a cybercrime-focused conference coming May 12th to Arlington! Please RT! 1/x
You asked for it, so
@msftsecurity
is helping us deliver!
Join us for “SLEUTHCON After Dark”, a special networking reception featuring a live recording of The Microsoft Threat Intelligence Podcast hosted by
@sherrod_im
!
We’re bringing together 10 of the top minds in APT &
We are thrilled to announce this year's lineup for
#SLEUTHCON
! From an extremely competitive CFP, we have put together an incredible group of speakers with deep expertise and broad perspective on cybercrime. Please spread the word! 1/x
We took a moment today to recognize cyber intelligence pioneer Joyce Lin, who gave her life delivering humanitarian aid three years ago. You can contribute to the mission she served here:
Great meeting of the CFP board yesterday! It wasn’t easy to choose between so many amazing submissions. Thank you everyone who submitted. Stay tuned for this year’s lineup!
We’ll be giving away this awesome Custom Igloo Playmate Classic Kool Tunes 14 qt Cooler to one of the SLEUTHCON Livestream attendees tomorrow! 😎 Stay tuned!
Watch
@selenalarson
&
@joewise34
to learn how ecrime actors always find a way to develop new techniques in response to defenders & how these techniques are quickly identified by the security community to keep users safe!
#SLEUTHCON
#cybercrime
#infosec
Good morning everyone and thanks for coming to the inaugural
#BRUNCHCON
, now rebranding as
#SLEUTHCON
! We're excited to have a mini-con focused entirely on the cyber crime ecosystem.
🗓️ MARK YOUR CALENDARS!
#SLEUTHCON
is happening on Friday, May 24th at the Hyatt Regency in Crystal City, Arlington, VA!
Stay tuned for the CFP & how to register to join virtually or IRL. We can’t wait! 🐍
We Stan
@selenalarson
. 🫶🏼
Learn more about her upcoming
#SLEUTHCON
talk at !
P.s. Get your tix for in-person & virtual today. We have some surprise announcements coming up for registrants! 😉
From the whales of Lapsus & 0ktapus, to the lesser-known predators that prowl in the muddier waters of anonymity, join
@nicastronaut
to dive into how these turbulent “groups” present a new challenge in defining a “cluster”.
To register, go to !
#SLEUTHCON
Power remains out for several blocks. We are limping along now in room but we can’t stream yet. We are recording sessions and will share as soon as possible. Hopefully power will return shortly.
We’re so grateful to each and every one of you that came to Arlington or joined us from home for
#SLEUTHCON
last Friday! 💛
🔜 More photos and videos to come. Keep an eye on your inboxes for all of the latest SLEUTHCON news. 👀
Our CFP is super short and we like it that way! Short CFPs mean fresh content. We know it's a pain, so we are paying full-talk speakers. And speakers get the best swag! If you are hesitant to submit because of the cost of travel, just reach out. 2/x
Our final talk for today is from
@tiskimber
and Genevieve Stark, who will be discussing a common loader called SHELLSTING, also known as Bumblebee.
#BRUNCHCON
You don’t want to miss this talk!
Learn about criminal hacker communities & how they operate within a rapidly shifting ecosystem impacted by law enforcement surveillance, information warfare,
& rival hacker interests.
Register at !
#SLEUTHCON
This year's keynote speaker will be Andy Greenberg (
@a_greenberg
), author of Sandworm, and most recently, Tracers in the Dark. Don't miss his unique perspective on the threat. 2/x
We’ll be giving away this awesome Custom Igloo Playmate Classic Kool Tunes 14 qt Cooler to one of the SLEUTHCON Livestream attendees tomorrow! 😎 Stay tuned!
We are finally dropping our BRUNCHCON videos to YouTube and announcing the date of our imminent return. BRUNCHCON is now SLEUTHCON! See you on May 12th in Arlington! 1/x
👀 In this presentation
@AShukuhi
reports on the well-known threat actor named Dydka or Uncle (transliterated Russian into English), who is infamous for his role in developing Babuk and Monti ransomware and orchestrating some of the most impactful ransomware attacks to date.
📜 CALL FOR PROPOSALS
We’re looking for speakers to share their knowledge of
#cybercrime
& financially-motivated
#cyberthreats
.
The deadline for submissions is March 31, 2023!
For more info & submission guidelines, visit .
It's going to be a busy week on the announcement front. 👀
But first, you'll want to take advantage of Early Bird registration because it ends tonight!
#SLEUTHCON
🎤Apply to be a
#SLEUTHCON
speaker + join us in person on Friday, May 24th!
📝 To learn more & submit your proposal, go to .
⏳The deadline for proposals is Friday, April 5th!
On May 12th, Eric and Ryan will show us consistently used URL patterns, command-line artifacts, file names, and other behaviors that threat hunters & intel analysts can use to uncover PROPHET SPIDER intrusions.
Sign up at !
#threathunting
#cybercrime
Next month, Zoë Brammer will present a comprehensive map of the
#ransomware
payment ecosystem––the first of its kind. She and her colleagues hope it paints a clear picture of the people, processes, & information involved in ransomware payments.
Visit !
🎟️ Early Bird registration to join us IRL on Friday, May 24th is now OPEN!
Don’t miss the opportunity to get your ticket early and before they sell out.
#SLEUTHCON
😍 The
#SLEUTHCON
swag bags for in-person attendees are looking real nice thanks to our Presenting Sponsors this year,
@rubrikInc
&
@vtxproject
!
Get yours on May 12th! Go register at .
Given the recent high profile incidents in the hospitality sector, it’s a good time to revisit
@nicastronaut
’s talk at SLEUTHCON that included the actor implicated in these incidents.
Thank you all so much for coming to our inaugural
#BRUNCHCON
to share knowledge on the cyber crime ecosystem! Stay tuned for more on a future event. 🍳🥓🥂🍊
Learn more about the top threats currently used to gain initial victim access! This talk provides an analysis of TTP overlaps & differences among them plus a link analysis of the later-stage crimeware payloads these threats are frequently used to deliver.
The legal cannabis industry has grown exponentially. 📈 And, like any business, they’re not immune to
#cybersecurity
& physical
#security
threats.
Watch
@infosecsherpa
provide an overview of the cyber threats & challenges faced by this industry ⬇️
Why speak at SLEUTHCON??? We will pay you for a relatively short talk. Check out our CFP now. Plus it's fun and you'll get free stuff. We've assembled an all-star crew to review submissions this year. 3/x
Crypting tools and services, advertised for sometimes only tens of dollars, are used by some of the most high-impact malware distributors and intrusion operators. Understanding this ecosystem has always been critical to understanding & tracking cybercrime.
Join us at
#SLEUTHCON
Lizzie Cookson’s discussion will walk through a few case studies of how disparate IOC’s, TTP’s, and behavioral patterns are mosaic’d together to gain attribution conviction.
Learn more & register for
#SLEUTHCON
at !
#Ransomware
#ThreatHunting
#threatintel
Countless actors have integrated Androxgh0st into their tools, including more robust toolsets such as the AlienFox, Legion, and Predator cloud infostealers. Despite each actor’s efforts to hide their tool’s source code, these tools are ultimately cracked and the source code is
Our CFP is super short and we like it that way! Short CFPs mean fresh content. We know it's a pain, so we are paying full-talk speakers. And speakers get the best swag! If you are hesitant to submit because of the cost of travel, just reach out. 2/x
‼️ Don't miss this in-depth look at a pivotal moment in the career of Bassterlord which culminated in the creation of *two* meticulously crafted manuals aimed at indoctrinating novices into the realm of ransomware.
Get your tickets now
Watch
@selenalarson
&
@joewise34
delve into the persistent innovation of ecrime actors, who continually devise new techniques in response to defenders. ➡️ See their
#SLEUTHCON
2023 talk at !
Watch
@selenalarson
&
@joewise34
delve into the persistent innovation of ecrime actors, who continually devise new techniques in response to defenders. ➡️ See their
#SLEUTHCON
2023 talk at !
Join our speakers for an in-depth look at the evolution of one of the most prominent cyber criminal intrusion tools of the last 5 years! They’ll examine notable users, case studies, & analyze revenue obtained from the operation.
Get your tickets now at !
Last May,
@greglesnewich
discussed the swiftly evolving initial access methods utilized by TA444, one of North Korea's cybercriminal groups. Learn more about it ➡️ !
#SLEUTHCON
IMPORTANT NOTICE:
To provide a more immersive experience for participants, the
#SLEUTHCON
‘24 livestream will only be viewable through the new ✨SLEUTHCON Vision Pro✨!
The launch edition is ON SALE now at !
🎉 We are so proud to have
@rubrikInc
&
@vtxproject
as Presenting Sponsors at this year’s
#SLEUTHCON
!
Get your tickets now at to join us in person or online on Friday, May 12th!
Some wonder why we'd choose speakers so late, and we get it! It's not easy to operate this way, but if you want fresh material you can't ask for talks a year out. These talks are fresh! Be prepared to hear things you haven't heard before. Join us! 2/x
Thank you to our Presenting Sponsors,
@rubrikInc
and
@vtxproject
, for your continued support this year!
🔜 To join us next Friday 5/24, visit to register.
#SLEUTHCON
Using a comprehensive dataset of activity on Breached– from its emergence in March ‘22 to seizure in ‘23-
@MeganMiller
, Rhys Leahy, & Olivia Kantor, show how and why Breached became the largest criminal forum for hacked & leaked data.
▶️ Watch now:
Hyperscalers, which by Wall Street’s definition, include AWS, Azure & GCP, present opportunities for crime whether you are a low-level, commodity hacker or a ransomware gang. In this talk,
@techyteachme
will review several interesting cases, provide a model for conference goers
Joining us IRL in Arlington on May 24th?
Stay tuned for the
#SLEUTHCON
2024 Fashion Guide by
@ericalikestech
.
Get your early-bird rate tickets now at !
Now we'll hear from
@iHeartMalware
on Business Email Compromise at
#BRUNCHCON
. He notes that we have only touched less than 1% of the problem - but we don't know the full scope of the problem.
Thank you again to everyone who submitted. There was simply not enough time in the day to choose everyone we wanted to hear from. And thank you to our fantastic CFP board who made some tough choices!
Sad to miss the
#CTISummit
this year for another event, but good luck to the presenters and attendees this week! Hope to see many of you at
@SLEUTHCON
in May, if not sooner.