Welcome to Miami

The 5th Hacker Halted USA is now taking place in Miami under the slogan – Unravel the Enigma of Insecurity after hurricane Sandy passed Florida last weekend.

Day 1 is the keynote day, so luckily no splitted presentation-streams. After a nice conference opening by Eric Lopez (Conference Director), Jay Bavisi gave a good introduction about the challenges of the post-PC era. He described the evolution of the hardware landscape from classic PCs to small, mobile and smart devices and how the requirements for it-security change. Further this brings problems to forensics, more privacy risks and new social engineering attacks as well as other threats.

The second presentation was given by Jack Daniel talking about responsibilities of hackers like helping and teaching other people. Later Winn Schwartau gave a very nice presentation about problems talented people face while hiring. In general he pointed out that discrimination is one big issue to solve in order to get more talented people hired and to stop the current “cyber security hiring crisis”.

A maybe interesting talk about open source intelligence was cancelled, as the presenter didn’t show up.

The day was closed with a panel discussion on end user security awareness. Following some key points of the discussion:

• Use teachable moments, e.g. an incident
• Use this to create an uncomfortable for similar future situations, so the user don’t run into the same problem again
• Use positive incentives
• Think about methods to ensure that the users follow the policies in general (not limited to the office/work)

Besides the talks some other cool things are going on here:

• The global CISO forum
• The Global Cyberlympics world finals. Winner is the team from the Netherlands – congratulations!
• Capture the packet competition
• Warl0ck gam3z competition

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.