CTI Malwarelandia
Cybelle Oliveira is a Cybersecurity Consultant, postgraduate in Cyber Threat Intelligence and Master's student in Cyberintelligence at the International Cybersecurity Campus of the University of Murcia, Spain. She has been involved in privacy and security activism for over 10 years and has presented talks at events around the world, including BSides LV, BSides SP, Girls Hack Village (DefCon), 8.8 Chile, Internet Freedom Festival, Radical Networks, Mozilla Festival, Roadsec, Cryptorave, among others. Cybelle is part of the Mozilla community and is the director of the Casa Hacker organization.
| Aug 9th 2024 | DEF CON Creator Stage 3 | Las Vegas Convention Center. Adversary Tactics
In this technical talk, we will uncover a new aspect of NFTs: using them as attack vectors to relay C2
commands. Fingerprinting a system? Exfiltrating information? Encrypting and wiping data? Executing
arbitrary commands? Of course! But with a dark twist: deployed NFTs are blockchain-backed assets immune
to takedowns. Imagine having your own “immortal” C2 Server for less than $10 dollars in $ETH.
For this, we will introduce “mFT” an open-source tool that automates the creation of malicious
payloads and provide sample harmless NFTs, allowing attendees to explore this novel attack vector on
their own machines safely.
This talk is the spiritual successor of "Everything is a C2 if you're brave enough", previously presented
at this very same village.
We Engage.
Join Adversary Village official Discord server to connect with our amazing community of adversary simulation experts and offensive security researchers!
