TMCnet News
CyberX's VP of Research to Dissect "Operation BugDrop" at SANS ICS Security SummitBOSTON, March 17, 2017 /PRNewswire/ -- CyberX, the industrial cybersecurity company protecting ICS infrastructures worldwide, today announced that its VP of Research will describe "Operation BugDrop" at the upcoming SANS Industrial Control Systems (ICS) Security Summit & Training in Orlando, FL (March 19-27). The summit brings together industry leaders and practitioners to learn the latest methods and techniques for defending control systems from advanced threats. The technical presentation by David Atch is entitled "Operation BugDrop: Stage 1 Cyber Reconnaissance in the Real World." David will describe how CyberX's threat intelligence research team recently discovered a massive cyber-reconnaissance operation targeting critical infrastructure, scientific research and media in the Ukraine and other countries. Because the operation eavesdrops on sensitive conversations by remotely controlling PC microphones – in order to surreptitiously "bug" its targets – and uses Dropbox to store exfiltrated data, CyberX named it "Operation BugDrop" (Twitter). David will describe how CyberX's threat intelligence team discovered the malicious operation, reverse-engineered the malware, and dissected its command-and control mechanisms. Hell also provide recommendations on how to protect ICS infrastructures from these types of cyber-intrusions. WHO: David Atch, VP of Research, CyberX About David Atch, VP of Research, CyberX David is a world-class cybersecurity expert with vast real-world experience in malware analysis, threat hunting and incident response. He has contributed multiple submissions to ICS-CERT including zero-day vulnerabilities for commercial ICS devices. Prior to CyberX, David had a military career in the IDF where he led a team of programmers and reverse engineers who continuously hunted and mitigated complex cyber-intrusions targeting the country's critical national infrastructure. He has also received multiple awards for technological innovation. About CyberX CyberX provides the most widely-deployed cybersecurity platform for continuously reducing risk to critical industrial infrastructures. Deployed in the world's largest environments and backed by military-grade cyber experts from the IDF, the CyberX platform uniquely combines M2M behavioral analytics with proprietary ICS-specific threat intelligence to identity advanced cyberattacks in real-time. By continuously monitoring ICS/SCADA/OT networks for targeted attacks, ransomware and industrial malware such as Havex and Black Energy, the CyberX platform enables organizations to prevent costly production outages, catastrophic safety failures, and theft of corporate IP. CyberX has gained considerable industry recognition including being named a "Cool Vendor" by Gartner. The company is also the only industrial cybersecurity vendor selected for the SINET16 Innovator Award sponsored by the US DHS and DoD, and the only ICS security vendor recognized by the International Society of Automation (ISA). An active member of the Industrial Internet Consortium (IIC) and the ICS-ISAC, CyberX's groundbreaking ICS threat intelligence research was recently featured in the popular McGraw-Hill book series, "Hacking Exposed ICS." For more information visit CyberX-Labs.com. Media Contact To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/cyberxs-vp-of-research-to-dissect-operation-bugdrop-at-sans-ics-security-summit-300425406.html SOURCE CyberX 
|