Rascagneres Paul
Paul Rascagneres is a principal threat researcher at Volexity. He performs investigations to identify new threats. He has presented his findings in several publications and at international security conferences. He has been involved in security research for 10 years, mainly focusing on malware analysis, malware hunting, and more specifically on advanced persistent threat (APT) campaigns and rootkit capabilities. He previously worked for several incident response teams within the private and public sectors.
Session
Why blockchain matters to Threat Intelligence? The presentation will try to reply to this question. The presentation will start by a quick presentation of the Ethereum decentralized blockchain and the smart contracts logic. Then, examples of malware abusing Web 3 will be described. The malware described during the presentation are linked to crimeware organizations as well as APT organizations. We will see why the attackers use Web 3, the advantage for them and the issues for the blue teams. Finally, we will cover the threat hunting opportunities and the tools that can be used to hunt for malware but also how to use block explorers such as etherscan.io or Arkham intelligence to track multiple blockchains and visualize transactions and addresses.