Name: Stories from the SOC: Malvertising Campaign Leads to Execution of Oyster Backdoor
Start: 2024-09-24T13:00:00Z
End: 2024-09-24T13:00:28.000Z
Location: BrightTALK
Rating: 4.9

Rapid7 is creating a more secure digital future for all by helping organizations strengthen their security programs in the face of accelerating digital transformation. Our portfolio of best-in-class solutions empowers security professionals to manage risk and eliminate threats across the entire threat landscape from apps to the cloud to traditional infrastructure to the dark web. We foster open source communities and cutting-edge research–using these insights to optimize our products and arm the global security community with the latest in attackers methods. Trusted by more than 10,000 customers worldwide, our industry-leading solutions and services help businesses stay ahead of attackers, ahead of the competition, and future-ready for what’s next.

The security landscape has evolved, and traditional vulnerability management approaches can no longer keep pace with today’s dynamic, hybrid environments. Join our upcoming webinar to learn about exposure assessment, including insights into Rapid7’s unified exposure management solution, Exposure Command, and the need for attack surface visibility, threat-informed risk assessment and integrated automated remediation capabilities.

In this session, Rapid7 experts will deep dive into why exposure assessment matters more than ever as organizations face an ever-expanding attack surface across cloud, on-prem, SaaS, and OT environments. Exposure management is no longer about finding more, it's about finding what matters and acting on it decisively. We will also touch on insights from the 2025 Gartner® Magic Quadrant™ for Exposure Assessment Platforms and why we think Rapid7 was named a Leader.

 Register now to discover some of Rapid7’s key capabilities, including:
●  Unified visibility
●  Threat-validated prioritization
●  AI-driven remediation
 
Gartner, Magic Quadrant for Exposure Assessment Platforms, By Mitchell Schneider, Dhivya Poole, Jonathan Nunez, 10 November 2025.
Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.

[NA] From Visibility to Action: Advancing Exposure Assessment with Rapid7

[EMEA] From Visibility to Action: Advancing Exposure Assessment with Rapid7

[APJ] From Visibility to Action: Advancing Exposure Assessment with Rapid7

Cyberattacks unfold in minutes and the first 24 hours of a breach can mean the difference between a minor incident and a costly crisis. Join us for a webinar where MDR experts Jeffrey Gardner and Sarah Lee will walk through a real-world example and break down exactly how Rapid7 managed detection and response stops attackers in their tracks.

You will see how agentic AI, expert analysts and real-time containment work together to identify, contain and remediate threats, often before attackers even know they have been detected. Whether you are evaluating detection and response solutions or want to test your team's readiness, you will leave this session with actionable insights to stay resilient against evolving threats. 

Register now to learn:
- What really happens in the first 24 hours of a cyberattack
- How MDR combines AI and human expertise to stop threats in minutes
- The difference in outcomes with Rapid7 MDR versus without Rapid7 MDR

[NA] Inside the First 24 Hours: How MDR Stops Cyberattacks in Their Tracks

[EMEA] Inside the First 24 Hours: How MDR Stops Cyberattacks in Their Tracks

[APJ] Inside the First 24 Hours: How MDR Stops Cyberattacks in Their Tracks

Rapid technological innovation is reshaping the cybersecurity threat landscape at an unprecedented pace. Alongside AI’s continuing evolution and the rise in advanced cybercriminal networks, growing geopolitical instability, shifting regulations, and the potentially disruptive effects of quantum computing are redefining how organizations must approach security in 2026. 

Join us on January 14th for Rapid7’s annual Cybersecurity Predictions webinar to hear experts discuss the evolving nature of the cybersecurity landscape. They will share insights and strategies as well as how security teams can stay resilient in 2026 and beyond.

Join this session to gain a better understanding of:
- Last year's security trends, impacts & lessons learned
- Top security predictions for 2026 
- How to prepare your team and organization for what's ahead

[NA] Top Cybersecurity Predictions for 2026

[EMEA] Top Cybersecurity Predictions for 2026

[APJ] Top Cybersecurity Predictions for 2026

The security landscape has evolved, and traditional vulnerability management approaches can no longer keep pace with today’s dynamic, hybrid environments. Join our upcoming webinar on December 15 to learn about exposure assessment, including insights into Rapid7’s unified exposure management solution, Exposure Command, and the need for attack surface visibility, threat-informed risk assessment and integrated automated remediation capabilities.

In this session, Rapid7 experts will deep dive into why exposure assessment matters more than ever as organizations face an ever-expanding attack surface across cloud, on-prem, SaaS, and OT environments. Exposure management is no longer about finding more, it's about finding what matters and acting on it decisively. We will also touch on insights from the 2025 Gartner® Magic Quadrant™ for Exposure Assessment Platforms and why we think Rapid7 was named a Leader.

 Register now to discover some of Rapid7’s key capabilities, including:
●  Unified visibility
●  Threat-validated prioritization
●  AI-driven remediation
 
Gartner, Magic Quadrant for Exposure Assessment Platforms, By Mitchell Schneider, Dhivya Poole, Jonathan Nunez, 10 November 2025.
Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.

Rapid technological innovation is reshaping the cybersecurity threat landscape at an unprecedented pace. Alongside AI’s continuing evolution and the rise in advanced cybercriminal networks, growing geopolitical instability, shifting regulations, and the potentially disruptive effects of quantum computing are redefining how organizations must approach security in 2026. 

Join us on December 10th for Rapid7’s annual Cybersecurity Predictions webinar to hear experts discuss the evolving nature of the cybersecurity landscape. They will share insights and strategies as well as how security teams can stay resilient in 2026 and beyond.

Join this session to gain a better understanding of:
- Last year's security trends, impacts & lessons learned
- Top security predictions for 2026 
- How to prepare your team and organization for what's ahead

Join Sabeen Malik, a leading expert on geo and cyber risk, to learn practical, high-impact strategies for creating a robust, contextual risk framework. This webinar will explore why traditional, static risk assessments are no longer sufficient for managing risk in complex operating environments. Cyber and geopolitical risks evolve too quickly and follow unpredictable patterns, making them fundamentally different from other insurable business risks. 

We will detail how conflict escalation, economic competition, and the weaponization of supply chains drive an exponential increase in enterprise cyber risk, placing immense pressure on C-Suites and Boards under rising regulatory and investor scrutiny. 

You will learn high-impact strategies to:
- Build a Contextual Framework: Create cross-functional teams ("risk residents") to correlate business risks with cyber threats.
- Quantify Impact: Move beyond technical checklists to scenario-based, dollarized quantification (leveraging frameworks like FAIR) that justifies smart investment.
- Tailor Resilience: Prioritize controls that protect your mission-critical assets against sophisticated emerging threats.

Secure your spot to gain the strategic foresight needed to manage cyber risk as a geopolitical reality.

Geopolitical and Cyber Risk: Two Sides of the Same Coin

As organizations rapidly adopt multicloud, hybrid environments and AI-driven technologies, security teams are facing increased pressure to manage risk at scale. Traditional reactive approaches are no longer enough. To stay ahead of evolving threats, security leaders must embrace a culture of proactive cloud exposure management—powered by visibility, automation, and collaboration across the business.

In this joint session, experts from Rapid7 and AWS will share proven strategies to operationalize proactive security practices, including the “7 Habits” framework for identifying, prioritizing, and remediating exposure risks before they lead to incidents. Learn how to shift from reactive fire drills to a more holistic, intelligence-driven security posture.

What you’ll learn:

- How to assess your organization’s exposure management maturity and take steps toward unification and automation
- Practical ways to empower developers and IT teams with real-time risk context and enforce remediation at scale
- How to engage business stakeholders and build a mindset shift toward proactive security across teams

[NA] How to Build a Culture of Proactive Cloud Exposure Management with AWS and Rapid7

[EMEA] How to Build a Culture of Proactive Cloud Exposure Management with AWS and Rapid7

Join us for an insightful ‘Stories from the SOC’ webcast  as we explore a recent mail advertising campaign targeting users with malicious installers disguised as popular software such as Google Chrome and Microsoft Teams. These installers deploy Oyster backdoor, also known as Broomstick, enabling cyber attackers to conduct hands-on-keyboard activity and deploy additional payloads.

During the webcast, we will examine:

- The delivery methods of the Oyster backdoor
- Provide an in-depth analysis of its components
- Offer a Python script to help extract its obfuscated configuration

Register today to uncover the full story, and unlock new opportunities to strengthen your SOC.

Stories from the SOC: Malvertising Campaign Leads to Execution of Oyster Backdoor

Security Operations Center

Malicious Activity

Python

Incident Detection

Incident Response

Incident Resolution

Malware

Cyber Defense

Cyber Attacks

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Stories from the SOC: Malvertising Campaign Leads to Execution of Oyster Backdoor

Presented by

About this talk

Rapid7