Presented at
Disobey 2024,
Feb. 16, 2024, 5 p.m.
(45 minutes).
Cl0p grop has been targeting MOVEit servers for data exfiltration and extortion. This is a story who are cl0p, who were their targets, and how they managed to steal your data.
Presenters:
-
Juho Jauhiainen / whois
as Juho "whois" Jauhiainen
Juho is a DFIR professional, a malware analyst, a speaker, and an instructor. He is currently working as a TRIAGE Team Lead for Europe for Accenture and helping out organisations with their incident response globally. In addition to his current position, he has DFIR and malware analysis experience from various private and public sector organizations. In his freetime, he co-hosts award-winning Finnish podcast Turvakäräjät, runs Helsinki security meetup group HelSec, and teaches forensics at National Defence Training Association of Finland. In 2021 and 2022, Juho has been recognized as one of the top-100 IT influencers in Finland by TIVI magazine. Juho is CISSP, GCFA, GCTI, GMON, GREM, GX-IH, and OSCP certified, and holds a master's degree in Information Security and Cryptography.
Links: