Centre for Cybersecurity Belgium (CCB) invites you to their event

Centre for Cybersecurity Belgium (CCB) - Quarterly Cyber Threat Report (QCTR) - Part 3/3

About this event

The Centre for Cybersecurity Belgium (CCB) presents to you its first online Quarterly Cyber Threat Report (QCTR) event.

Normally the (live) event is only accessible for CCB constituents but this time we open the virtual doors to all our partners for part 2 & 3. This is the invitation for part 3/3.

Agenda:

15h50 - 17h20: Living 25 years with Turla ... time to tell the whole story!

17h20 - 17h30: Conclusion of the event by Miguel De Bruycker, Managing Dir. CCB

Living 25 years with Turla ... time to tell the whole story!

The third part of the CCB Quarterly Cyber Threat Report (QCTR) is dedicated to the history (and future) of the state-sponsored APT group Turla.

It all started in 2016 when Professor Thomas Rid surprised all cyber security researchers present at the Kaspersky SAS conference with his presentation on Moonlight Maze.

Was Moonlight Maze actually Turla or is Turla Moonlight Maze?

Several top researchers started a new joint research that resulted in the report called "Penquin's Moonlight Maze" ( https://securelist.com/penquins-moonlit-maze/77883/ ). Their research goes back to 1996 and reveals how Moonlight Maze has evolved over the years.

During this webinar, three of the researchers (Thomas Rid, Costin Raiu and Juan Andres Guerrero) will tell the story of "Penquin's Moonlight Maze".

But will they bring the whole story? Or will there be elements disclosed during this webinar that never have been disclosed before ?

You'll find out all about it during the CCB webinar "Living 25 years with Turla ... time to tell the whole story!"

We hope to see you online!

Hosted by

  • Guest speaker
    G
    Juan Andres Guerrero Security researcher @ co-founder of a stealth security startup

    Juan Andrés is a security researcher tracking cyberespionage groups. He's the co-founder of a stealth security startup and an adjunct professor of Strategic Studies at Johns Hopkins School of Advanced International Studies (SAIS). Juan Andrés was Chronicle Security's Research Tsar and founding researcher of the Uppercase team. Prior to joining Chronicle, he was Principal Security Researcher at Kaspersky's GReAT team focusing on targeted attacks and worked as Senior Cybersecurity and National Security Advisor to the Government of Ecuador. Juan Andrés comes from a background of interdisciplinary research in Philosophical Logic. His publications include 'The Ethics and Perils of APT Research: An Unexpected Transition Into Intelligence Brokerage', ‘Wave your False Flags! Deception Tactics Muddying Attribution in Targeted Attacks’, and 'Walking in your Enemy's Shadow: When Fourth-Party Collection Becomes Attribution Hell'. His joint work on Moonlight Maze is now featured in the Internati...

  • Guest speaker
    G
    Costin Raiu Director, Global Research and Analysis Team @ Kaspersky

    Costin specializes in analyzing advanced persistent threats, zero-day exploits and complex malware. He is leading the Global Research and Analysis Team (GReAT) at Kaspersky that researched the inner workings of many high-profile attacks, including WannaCry, ShadowPad and ShadowHammer, Moonlight Maze and the Equation group. His current work is focused on the development of code similarity technologies and systems for enriching threat intelligence. Costin has over 26 years of experience in anti-virus technologies and security research. He is a member of the Virus Bulletin Technical Advisory Board, a member of the Computer AntiVirus Researchers’ Organization (CARO) and a reporter for the Wildlist Organization International. Before joining Kaspersky Lab, Costin worked for GeCad as Chief Researcher and as a Data Security Expert with the RAV antivirus developers group.

  • Guest speaker
    G
    Miguel de Bruycker Managing Director @ Centre for Cybersecurity Belgium (CCB)

    Miguel De Bruycker studied at the Royal Military School and the Vrije Universiteit Brussel. After writing a dissertation on Cyber Defence in 2005, he joined the General Intelligence and Security Service and was responsible for the security of classified networks and the creation of the first cybersecurity unit of the Belgian Defence. Since 2008 , he and his cyberteam are involved in the processing of all major cyber incidents in Belgium. On August 17, 2015 , he became Managing Director of the Centre for Cybersecurity Belgium.

  • Guest speaker
    G
    Carlos Carrillo Global Threat Intelligence Liaison at IBM @ IBM

    Mr. Carrillo serves as the Global Threat Intelligence Liaison for IBM Security. As IBM's Global Threat Intelligence Liaison, he manages a global network of trusted partners that share information on advanced cyber threats. Carlos began his career in information security in 1997 while serving as a Communications Officer in the United States Air Force Office of Special Investigations. Over his career in the United States Air Force and as a civilian in the private sector, he responded to breaches affecting the Department of Defense and led complex intrusion investigations for Fortune 500 corporations. Carlos developed network intrusion investigation courses and served as an instructor for FBI cyber agents. Additionally, he was a founding member of Mandiant’s Threat Intelligence group. Mr. Carrillo holds degrees in Computer Science and Information Assurance.

  • Guest speaker
    G
    Nour Fateen Technical Solutions Manager, EMEA @ Recorded Future

    Nour Fateen is a cyber-security specialist with over 7 years of experience in the industry. Currently at Recorded Future, Nour has previously held positions in Cisco Systems and Goldman Sachs. Nour graduated with a Masters in Electronic Engineering & Nanotechnology from University College London. He has spent the last 3 years helping some of the largest businesses in the world improve their security posture using Threat Intelligence.

  • Guest speaker
    G
    Thomas Rid Professor of Strategic Studies @ Johns Hopkins University's School of Advanced International Studies

    Thomas Rid is a leading expert in a field of growing importance to foreign policy and security issues. He has published numerous articles and books, most recently Rise of the Machines (2016), a history of how cybernetics, a vintage theory of machines, came to incite anarchy and war.

  • Guest speaker
    G
    Doris Gardner Principal Threat Analyst @ FireEye

  • Guest speaker
    G
    John Fokker Head of Cyber Investigations and Principal Engineer at McAfee @ McAfee

    John Fokker is a Principal Engineer and Head of Cyber Investigations for McAfee’s Advanced Threat Research team. John has a focus on Threat Intelligence, Malware and the Cyber Criminal Underground. Prior to joining McAfee, he worked at the National High-Tech Crime Unit (NHTCU), the Dutch national police unit dedicated to investigating advanced forms of cybercrime. During his career he has supervised numerous large-scale cybercrime investigations and takedowns. Fokker is also one of the co-founders of the NoMoreRansom Project.

  • Guest speaker
    G
    Pedro Deryckere Head of CCB/CyTRIS @ Centre for Cybersecurity Belgium (CCB)

    In 2013 Pedro was one of the lead investigators in the Belgacom (cyber espionage) case. Since 2013 he was involved in several dozen cyber espionage cases. In December 2016 he joined the Centre for Cyber security Belgium (CCB). He created the CyTRIS team (Cyber Threat Research and Intelligence Sharing). Until today he's the Head of CyTRIS the CTI department of CCB.

Centre for Cybersecurity Belgium (CCB)

Making Belgium one of the least vulnerable countries in Europe

The Centre for Cybersecurity Belgium (CCB) is the national authority for cybersecurity in Belgium. The CCB supervises, coordinates and monitors the application of the Belgian cyber security strategy which is "Make Belgian One Of The Least Vulnerable Cyberspaces".