BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-canberra-2025//speaker//LRLSLW
BEGIN:VTIMEZONE
TZID:AEST
BEGIN:STANDARD
DTSTART:20000326T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3;UNTIL=20050326T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20060402T040000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060401T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20070325T040000
RRULE:FREQ=YEARLY;BYDAY=4SU;BYMONTH=3;UNTIL=20070324T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20080406T040000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000827T030000
RRULE:FREQ=YEARLY;BYDAY=4SU;BYMONTH=8;UNTIL=20000826T170000Z
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20011028T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20071027T170000Z
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20081005T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=10
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-canberra-2025-ZEZLPR@pretalx.com
DTSTART;TZID=AEST:20250926T155000
DTEND;TZID=AEST:20250926T163000
DESCRIPTION:As macOS continues to grow in popularity within enterprise envi
 ronments\, cyber threats like the Atomic Stealer malware family have emerg
 ed\, leveraging stealthy and sophisticated techniques such as Dyld (Dynami
 c Linker) injection to establish persistence and evade detection. This ses
 sion focuses specifically on the Atomic Stealer family\, dissecting its ut
 ilization of Dyld injection to covertly execute malicious payloads by mani
 pulating environment variables\, notably DYLD_INSERT_LIBRARIES\, within le
 gitimate processes.\n\nThe presentation will provide detailed insights der
 ived from original research\, including step-by-step demonstrations of Ato
 mic Stealer's operational methodologies\, injection techniques\, and persi
 stence mechanisms. Attendees will learn about custom detection methods des
 igned to identify the Atomic Stealer and similar threats\, incorporating a
 dvanced endpoint behavioral analysis\, macOS native logging mechanisms\, a
 nd specially crafted YARA signatures. \n\nParticipants will leave equipped
  with concrete\, actionable strategies for detecting\, mitigating\, and pr
 oactively hunting threats associated with the Atomic Stealer malware famil
 y.
DTSTAMP:20260603T234302Z
LOCATION:Main Track
SUMMARY:Atomic Stealer's Dyld Injection Tactics - Tonmoy Jitu
URL:https://pretalx.com/bsides-canberra-2025/talk/ZEZLPR/
END:VEVENT
END:VCALENDAR