Name: Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41
Start: 2024-05-14T09:00:00Z
End: 2024-05-14T09:00:35.000Z
Location: BrightTALK
Rating: 0

Lookout is an integrated endpoint-to-cloud security company. Our mission is to secure and empower our digital future in a privacy-focused world where mobility and cloud are essential to all we do for work and play. We enable consumers and employees to protect their data, and to securely stay connected without violating their privacy and trust. Lookout is trusted by millions of consumers, the largest enterprises and government agencies, and partners such as AT&T, Verizon, Vodafone, Microsoft, Google, and Apple. Headquartered in San Francisco, Lookout has offices in Amsterdam, Boston, London, Sydney, Tokyo, Toronto and Washington, D.C. To learn more, visit www.lookout.com.

Why Does My CEO Want My Password? Cybercriminals are impersonating senior executives and IT teams to trick employees into sharing critical sensitive information and corporate credentials. With one usable set of credentials, attackers can quietly access your cloud infrastructure and compromise data undetected. What’s worse is that you often don’t know when your employees are being targeted - making it impossible to proactively defend against these threats. 

Join this 30-minute webinar to learn: 

- How cybercriminals are modernizing their tactics to compromise entire organizations through a simple text message. 
- Why visibility into the initial steps of a modern attack is crucial to protecting data.
- How Lookout protects against executive impersonation and smishing attacks.

Lookout & Verizon: Executive Impersonation and Smishing Attacks Explained

Designed for traditional network architectures, VPNs are an outdated solution that no longer meet the security needs of today’s remote, multi-cloud environments. They are difficult to scale, complex to manage, impact user performance, and are full of vulnerabilities. 

As a result, zero trust architectures have become a security requirement for every organization to protect sensitive data and applications. Although necessary, it is seemingly complex to implement and maintain across environments where data and access flow between different apps, devices, and networks.

Join our upcoming session where you'll learn:

- Why traditional VPNs are falling short: Understand the limitations and vulnerabilities of VPNs and how they can expose your organization to risks.

- The importance of zero trust: Discover how a zero trust approach can help you reduce the risk of data breaches, prevent unauthorized access, and protect sensitive information.

- How to replace VPNs with zero trust access: Learn about Lookout Secure Private Access, a solution that provides continuous zero trust access, secure remote access without a VPN, granular access control, application cloaking, and enhanced network visibility and control.

- Best practices for implementing zero trust: Get expert guidance on how to successfully adopt a zero trust strategy and overcome common challenges.

Goodbye VPN, Hello ZTNA: Secure Your Organization with Zero Trust

In today's digital landscape, organizations face an ever-evolving array of cyber threats. From sophisticated phishing attacks to data breaches, the risks are real and substantial. Cloud-based Secure Web Gateways (SWG) have evolved to become a critical tool to safeguard businesses from these advanced attacks.
Join this session to learn how SWGs can address the complex challenges of today's security landscape. Discover the importance of a modern SWG solution and how it keeps organizations, employees, and customer data safe through:

URL & Content Filtering: Block access to malicious websites and content, ensuring compliance and enhancing employee productivity.

Zero-Day Phishing Protection: Safeguard users from phishing scams and malicious web content with Remote Browser Isolation capabilities.

Data Loss Prevention: Protect against data leakage through web channels, including Shadow IT detection and GenAI platforms.

Learn how Secure Internet Access — Lookout's next-gen SWG solution — stands out in providing comprehensive protection against advanced threats.

Defending Against Advanced Threats with a Modern Secure Web Gateway

In a digital landscape where cloud storage leaks are as common as a forgotten password, safeguarding your data is more important than ever. If you're tired of your files slipping through the cracks and making unplanned escapes, this webinar is here to help you seal those gaps with confidence!

In this session, you will learn how to:
- Restrict Public File Sharing: Learn the art of keeping your files from accidentally moonlighting on the internet, and discover best practices to manage public sharing without compromising security.
- Safeguard Sharing with External Users: Uncover the secrets to securely sharing files with external partners, vendors, or collaborators.
- Maintain Compliance: Delve into the essentials of ensuring your cloud storage data stays compliant with your security policies.

If you want to ensure your data doesn’t end up on a wild adventure, this webinar will equip you with the tools and tricks to keep your cloud storage secure and your data firmly in check.

Topics: 
- Public file sharing
- External sharing: implicit/explicit shares
- Compliance: Cloud data discovery

Mastering SSE | Cloud Leaks: Plugging The Holes Before Your Data Goes Rogue

Implementing Zero Trust Network Access (ZTNA) can sometimes feel like solving a Rubik’s Cube blindfolded. But what if you had cheat codes to make it all easier? This webinar is here to show you how to implement ZTNA with the simplicity of a game hack. 

In this session, you will:
- Discover how to effortlessly deploy ZTNA using an integrated, step-by-step workflow that makes setting up your solution feel like a walk in the park.
- Learn how to seamlessly identify and secure the private resources your users need access to, without breaking a sweat.
- Get the lowdown on creating and implementing adaptive access policies that adjust to your users' needs and behaviors, all while keeping security tight.

If you want to streamline your ZTNA setup and make deployment so simple it feels like you’ve unlocked the ultimate cheat code, this webinar will arm you with everything you need to win the game.

Topics: 
- Walk through VPN Deployment workflow

Mastering SSE | ZTNA: So Easy, It Feels Like Cheating

In an era where Generative AI (GenAI) is taking over our business operations like an overzealous ruler, ensuring your data is protected is more crucial than ever. Join us to discover the essential strategies for keeping your data safe from the increasingly ambitious plans of our GenAI overlords!

In this session, you will:
- Learn how to effectively audit and monitor GenAI interactions to identify potential risks and ensure compliance with data protection regulations.
- Explore methods to prevent unauthorized access to GenAI platforms, ensuring that only vetted and approved tools are used within your organization.
- Implement robust DLP strategies to prevent sensitive information from being inadvertently shared or exposed through GenAI interfaces.

Get the knowledge and tools needed to navigate the complexities of data protection in the age of GenAI. Don’t miss this opportunity to fortify your organization’s data security posture and stay ahead of emerging threats.

Topics: 
- Audit: How many users are using GenAI tools
- Block GenAI
- Block GenAI/Exception for ChatGPT
- Allow GenAI/Restrict PII

Mastering SSE | Protect Your Data From the GenAI Overlords

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorized access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Turning the Tables on Adversaries: Enhance Your SOC Playbooks With Mobile

Threat actors are constantly evolving their tactics to stay a step ahead of your data security strategies. The latest trend is to target mobile devices to compromise employee identities, quietly enter your infrastructure, and gain unauthorised access to data and systems. Your users spend hours on mobile devices each day, yet you remain blind to threats and risky interactions that are occurring on them.

Walk away from this webinar with an understanding of: 
- The richness of data available from Mobile EDR to enhance insight and proactive capabilities
- How to identify the early stages of a modern attack such as reconnaissance and social engineering
- The importance of including mobile in your SIEM/SOC to capture all detections and user activity
- How to enhance your playbooks with qualified and raw mobile event data

Modern breaches now happen in minutes, not months. Threat actors are exploiting the fact that mobile devices are more susceptible to social engineering, enabling them to gain direct access to cloud infrastructure with legitimate credentials and swiftly compromise data. Recent high-profile attacks are evidence of this including MGM Resorts, Caesars Entertainment, Twilio, and many others.

Join us for this 30-minute presentation to learn:
- How the traditional cyber kill chain has evolved to exploit mobile users
- Key findings from Lookout's Q1 Mobile Threat Landscape Report
- What makes your organization vulnerable to a modern-day attack
- Why automated defenses are essential
- How Lookout protects its customers from these types of attacks

Information Week Hosts Tales of a Modern Data Breach: The Rise of Mobile Attacks

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your organization safe.

Interactive Workshop: Hunt for Threats with Lookout Researchers

Threat hunting is evolving as more adversaries use coordinated cross-platform attacks to infiltrate enterprise and government organizations. Now more than ever, security teams must understand how to link traditional desktop or network-focused attacks with malicious activity in their iOS and Android fleets. 


Join us for a 30-minute interactive session with the researchers behind the discovery of WyrmSpy and DragonEgg. In this session, you will learn:

- How cross-platform indicators of compromise (IOCs) were used to help discover WyrmSpy and DragonEgg
- How to interpret mobile threats that could put your organization at risk. 
- How mobile EDR can help strengthen research and security workflows to keep your data secure

Your employees are using a diverse mix of cloud apps, private apps, personal networks, and unmanaged endpoints — making it difficult for your IT and security teams to have complete visibility into where your data resides. So how do you know all of your cloud data is protected?  

Your teams are now asked to secure an extremely complex environment, oftentimes with traditional point solutions that are siloed, difficult to manage, and lack built-in data and endpoint protection.

What’s the problem? Increased security risks, operational costs, and potential for human error.

Your solution? A data-centric cloud Security Service Edge (SSE) platform to simplify your security posture and lower costs.

Join our upcoming session where you'll leave with a confidence in understanding in:

- The major benefits of a unified SSE platform
- How to gain full visibility and control across your entire IT infrastructure
- Ditching the complexity of managing multiple security products and policies for a unified, cloud-based approach

Conquer Cloud Security Complexity: Unify Visibility & Control with SSE

Security training for users is often the first step towards improving your organization’s security posture.  With the Lookout Cloud Security Platform, you can provide your users with real-time coaching to provide guidance immediately when security violations occur.

How To: Gain Real Time Guidance on the Proper Usage of Corporate Apps and Data

Generative AI sites are the latest Internet resource that is changing how users approach their tasks. These platforms leverage AI to create and improve content based on user submissions.

Learn how to protect confidential information from being shared to the collective by identifying personally identifiable information, compliance violations, or even source code.

How To: Protect Against Sensitive Data Loss on Generative AI Platforms

It often takes years to fully integrate the IT infrastructure after a merger and acquisition. During that time, you need to provide user access to private enterprise apps while aligning security policies across both organizations. The Lookout Cloud Security Platform allows you to quickly provide access to private enterprise apps by following a zero trust network access architecture.

How To: Integrate With Your Existing Infrastructure

Many organizations work with a trusted group of partners and contractors. Appropriate security measures are required to protect the sharing of confidential information. With the Lookout Cloud Security Platform, you can enable data protection for external communication while helping to promote collaboration.

How To: Ensure Secure Data Sharing Between Employees, Partners, and Contractors

Many organizations leverage on-prem systems that are not cloud ready. Granting remote access often involves the deployment of additional on-prem VPN components. With the Lookout Cloud Security Platform, you can leverage zero trust network access to provide secure access and data protection to your private enterprise apps.

How To: Enable Cloud Computing While Preserving On-Prem Investments

How Lookout Protects Against the Modern Day Kill Chain

The Modern Kill Chain: How Attacks Have Gone From Months to Minutes

The Modern Kill Chain: What is it and How to Protect Against It

Scattered Spider: The cybercrime group behind the MGM Resorts data breach costing an estimated $100 million. 
APT41: A notorious Chinese APT that recently developed two mobile surveillanceware tools, WyrmSpy and DragonEgg, to target over 100 public and private sector organizations.

These two groups represent a global shift among threat actors – focusing on mobile devices to quietly compromise credentials, apps, and data. Join Tyler Croak, Principal Strategist at Lookout, and Ken Saganowski, Director of Technical Advisory at MOXFIVE, in this 30-minute session, to learn: 
 
- How the traditional kill chain has evolved 
- What modern tactics are being used to trick your users
- What happens after an attacker gains access - A real-life Scattered Spider example
- How to detect an intruder in your system
- What immediate actions you can take today to protect data in 2024

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Cyber Security

Information Security

Cyber Attacks

Cloud Security

IT Security

Threat Detection

Data Protection

Incident Response

Data Security

Threat Analysis

Get powerful HR legislation insights that will help you safeguard your business and workforce. Connect with thought leaders and colleagues to get the most up-to-date knowledge on legislations you need to be aware of.

Legislation

The legal community on BrightTALK combines the fields of employment law, e-discovery, intellectual property and environmental law to create a thriving ecosystem of legal resources. Attend live and on-demand webinars dealing with employment contract law, e-discovery solutions, intellectual property software and sustainable development from leading lawyers and legal professionals to gain knowledge in a wide range of fields. Join the community and be part of the conversation by attending live legal webinars and connecting with industry thought leaders.

Legal

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Understanding the Modern Kill Chain: Analyzing Scattered Spider & APT41

Presented by

About this talk

More from this channel