Milware After Stuxnet

No ratings

Presented at Suitsandspooks 2016 by

The evolution of leading edge state authored malicious code since Stuxnet has tended towards highly capable, modular espionage platforms. Capturing these capabilities under the term milware, this talk walks through some of the key differences including operating system like architectures and increasing persistence. It then highlights short term security challenges for the infosec community and long run implications for government. Based on what we know about platforms like Duqu 2.0, Equation Group, Turla, and Flame - milware threatens to undermine assumptions about how security firms operate, the role for law enforcement, and how threat actor's capabilities change over time.