Threat Intel Dumpster Diving & A Day in the Life of a Vulnerability Researcher

July meetup at Design Exchange, a new venue for DC416, sponsored by Trend Micro. Chandra Majumdar presented “Digital Dumpster Diving for Threat Intel”. It started on an engagement 8 years ago, when he built a stager that pulled an encoded string from Pastebin and decoded it into malware. Pastebin and Gist are often whitelisted, so he went looking for other attackers doing the same. The talk then covered several campaigns, sophisticated and not, that now use text dump sites and blogging platforms to deploy payloads.

Vincent Lee, a vulnerability researcher at Trend Micro’s Zero Day Initiative (ZDI), covered what happens after a report is submitted and what goes on behind the scenes at Pwn2Own, plus an average day on the job.