BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//orangecon-2024//speaker//CAUSAR
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-orangecon-2024-ZEXPCK@pretalx.com
DTSTART;TZID=CET:20240905T133000
DTEND;TZID=CET:20240905T140000
DESCRIPTION:Protecting Hundreds of Organizations Against AiTM: Lessons Lear
 ned" dives into the evolving threat of AiTM) attacks. Our presentation hig
 hlights the transition from basic phishing tactics to sophisticated method
 s that compromise organizational security. The presentation outlines the j
 ourney from oldschool phishing attacks\, to phishing framework like UADMIN
 \, and the introduction of tools like Evilginx. And now the SaaS providers
  allowing anyone to buy access to an AiTM platform.\n\nWe’ve introduced 
 a free method of detecting AiTM attacks. Which has allowed us an insight i
 nto the scale of AiTM attacks atleast against Microsoft M365 tenants. This
  prompted the development of a fingerprinting tool to gain an insight into
  the different actors performing these attacks and typical methods they em
 ploy.  \n\nWe give an insight into a popular AiTM SaaS platform and the re
 venue stream hosting such software creates. The session ends by outlining 
 common techniques to prevent these types of attacks. Most organizations us
 e M365 and experience attacks using AITM to bypass MFA. At the same time S
 aaS providers are building AITM services that allow targeteted attacks all
 owing for supply chain attacks (AITM targeted against admin sites for: pyp
 i\, npmjs and rubygems). At the same time used for very specific scams for
  example against booking.com. Attackers use the booking.com hotel login to
  extract creditcard information for upcomming hotel guests.
DTSTAMP:20260718T144548Z
LOCATION:Main track
SUMMARY:Protecting organizations against AITM: lessons learned. - Rik van D
 uijn\, Wesley
URL:https://pretalx.com/orangecon-2024/talk/ZEXPCK/
END:VEVENT
END:VCALENDAR