In this talk, I plan to present overview of the recent APT attacks against employees of cryptocurrency exchanges. Attackers took extra care on its social engineering skills while also using advanced malware and two 0-day exploits. This talk will give an overview of the attack. It will explain what kind of social engineering tricks they used to deceive even skilled programmers, where hacked into a famous university's student/staff account to abuse their infrastructure for the social engineering. It will also include what kind of preparation were necessary for the attackers to plot this attack, how normal it looked to the victim, what tricks they used to avoid detection from security team, security team's capabilities/limitations/how we should protect our assets from these kind of attacks. And also, a brief analysis of the backdoors used.
![CODE BLUE
2019 @TOKYO
Prepare John Doe
- The accounts they hacked are [nm603, grh37]
- Make up names accordingly: Neil Mor...](https://image.slidesharecdn.com/discreteaptcb-1574217244448-191211072040/85/cb19-recent-apt-attack-on-crypto-exchange-employees-by-heungsoo-kang-50-320.jpg?cb=1576048935)
![CODE BLUE
2019 @TOKYO
Prepare John Doe
- The accounts they hacked are [nm603, grh37]
- Make up names accordingly: Neil Mor...](https://image.slidesharecdn.com/discreteaptcb-1574217244448-191211072040/85/cb19-recent-apt-attack-on-crypto-exchange-employees-by-heungsoo-kang-51-320.jpg?cb=1576048935)
![CODE BLUE
2019 @TOKYO
Prepare John Doe
- The accounts they hacked are [nm603, grh37]
- Make up names accordingly: Neil Mor...](https://image.slidesharecdn.com/discreteaptcb-1574217244448-191211072040/85/cb19-recent-apt-attack-on-crypto-exchange-employees-by-heungsoo-kang-52-320.jpg?cb=1576048935)
![CODE BLUE
2019 @TOKYO
Favorite Method
- Hacked Angelina College
109
[https://tinyurl.com/firetrend]](https://image.slidesharecdn.com/discreteaptcb-1574217244448-191211072040/85/cb19-recent-apt-attack-on-crypto-exchange-employees-by-heungsoo-kang-109-320.jpg?cb=1576048935)
