The Threat Evolution: SAP Exploits, SEO Poisoning, and SkitNet Malware

Resources: https://linktr.ee/ReliaQuestShadowTalk

Join host Joey along with intelligence analysts John and Hayden as they discuss:

• ReliaQuest's investigation into hijacked routers and SEO poisoning fueling payroll heists
• Nation-state actors leveraging the SAP NetWeaver vulnerability en masse
• A new "Defendnot" tool that tricks Windows Defender into disabling itself
• Ransomware groups using a stealthy post-exploitation malware

Joseph Keyes: Cyber Threat Intelligence Analyst at ReliaQuest, specializing in technical cyber threat research. With his prior role as a Cyber Security Analyst, he has gained years of experience in triaging and responding to active threats using GreyMatter's various tools. Joseph is skilled in intrusion response, threat actor profiling, OSINT across the clear and dark web, and analyzing adversarial TTPs.

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.

Hayden Evans: Cyber Threat Intelligence Analyst at ReliaQuest. He has experience in the F3EAD lifecycle and analyzing adversaries' TTPs to operationalize this information. He is also experienced with intrusion response, OSINT investigations, and offensive security.