Operation CuckooBees: Deep-Dive into Stealthy Winnti

Track 2 - Savannah

Thu, 30 Jun 2022 @ 13:15:00

The presentation offers a unique glimpse into the Winnti APT Group intrusion playbook, covering the techniques that were used by the group from initial compromise to data exfiltration, including their latest undocumented and newly discovered payloads. Throughout this talk, we will familiarize our audience with Winnti’s TTPs, and present relevant ways to prevent such attacks in the future.