BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2026//speaker//FFZ7N3
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251020T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Hunting requires a bit of luck - Nicolas DIAZ\, Félix Aimé
DTSTART;TZID=Europe/Luxembourg:20261020T141500
DTEND;TZID=Europe/Luxembourg:20261020T144500
DTSTAMP:20261009T050419Z
UID:pretalx-hack-lu-2026-9UHM7W@pretalx.com
DESCRIPTION:Behind the facade of modern Content Delivery Networks (CDNs) l
 ike Cloudflare\, malicious threat actors frequently hide their true infras
 tructure to evade network-level scanning\, block automated detection\, and
  hinder attribution. Yet\, even the most calculated psychological operatio
 ns are prone to human error\, and sometimes\, effective threat hunting jus
 t requires a bit of luck. This presentation walks through a high-stakes\, 
 real-world investigation into an aggressive disinformation and smear campa
 ign targeting the international press freedom organization Reporters Witho
 ut Borders (RSF). \n\nWe demonstrate how standard Cyber Threat Intelligenc
 e (CTI) workflows combined with targeted Open Source Intelligence (OSINT) 
 and a stroke of operational serendipity can completely tear down a CDN-bac
 ked defense.\n\nThrough a collaborative effort\, two threat analysts (one 
 from RSF Nicolas DIAZ and the other one  Felix Aimé) successfully unmaske
 d the origin web server of a malicious cybersquatted domain used to denigr
 ate the NGO. Bypassing Cloudflare’s proxy allowed the team to map out th
 e adversary’s broader digital footprint\, leading directly to the techni
 cal attribution of (at least) one French communication agency. Attendees w
 ill gain a deep technical understanding of infrastructure tracking methodo
 logies and witness how contemporary domestic influence operations\, such a
 s those executed by Progressif Media\, are increasingly borrowing leaf-by-
 leaf from the psychological warfare and TTP manuals of notorious actors li
 ke the Wagner Group.
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2026/talk/9UHM7W/
END:VEVENT
END:VCALENDAR