Adversary Village at

Cybelle Oliveira

CTI Malwarelandia

Cybelle Oliveira is a Cybersecurity Consultant, postgraduate in Cyber ​​Threat Intelligence and Master's student in Cyberintelligence at the International Cybersecurity Campus of the University of Murcia, Spain. She has been involved in privacy and security activism for over 10 years and has presented talks at events around the world, including BSides LV, BSides SP, Girls Hack Village (DefCon), 8.8 Chile, Internet Freedom Festival, Radical Networks, Mozilla Festival, Roadsec, Cryptorave, among others. Cybelle is part of the Mozilla community and is the director of the Casa Hacker organization.

Technical talk: MFT: Malicious Fungible Tokens

| Aug 9th 2024 | DEF CON Creator Stage 3 | Las Vegas Convention Center.
Adversary Tactics

In this technical talk, we will uncover a new aspect of NFTs: using them as attack vectors to relay C2 commands. Fingerprinting a system? Exfiltrating information? Encrypting and wiping data? Executing arbitrary commands? Of course! But with a dark twist: deployed NFTs are blockchain-backed assets immune to takedowns. Imagine having your own “immortal” C2 Server for less than $10 dollars in $ETH.

For this, we will introduce “mFT” an open-source tool that automates the creation of malicious payloads and provide sample harmless NFTs, allowing attendees to explore this novel attack vector on their own machines safely.

This talk is the spiritual successor of "Everything is a C2 if you're brave enough", previously presented at this very same village.

We Engage.

Join Adversary Village Discord Server.

Join Adversary Village official Discord server to connect with our amazing community of adversary simulation experts and offensive security researchers!