Background

Introduction
- What?
- Why?
- How?
Unusual suspects
Marketplaces
Red team takeover
- Resources
Malware-as-a-Service (MaaS)
- Tongue, cheek
Ransomware-as-a-Service (RaaS)
- We do it for [insert reasons here]
Infostealer-as-a-Service (IaaS)
Distribution shifts
More LOL
Botnet activity increase
- Current
No device can ever be called secure

Mitre Att&Ck

Introduction
- What?
- Why?
- How?
Drive-by compromise
Supply chain compromise
- Static analysis notes
Phishing for information
- Network detection resources
Application Layer Protocol: Mail Protocols
- Network detection notes
Signs of a compromise @home

Device independent

Introduction
- What?
- Why?
- How?
Phishing
Drive-by download
MFA bypass attacks

Workstation specific

Introduction
- What?
- Why?
- How?
Ransomware

Mobile specific

Introduction
- What?
- Why?
- How?
Mobile malware
Smishing
Vishing
SIM swapping
- Prevention
OTP bots
- Prevention
- Resources
App squatting
- Related labs
- Resources
Ransomware
- Resources
Madware
- Prevention
Spyware
Location tracking
- Resources
Stalkerware

Hardening endpoints

Introduction
- What?
- Why?
- How?
A first strategy
- Defence strategies
- Keep calm and …
Android hardening
iOS hardening
Hardening Windows
Hardening GNU/Linux
Hardening macOS
Smarter mail servers
Active defence

Testlab

Phishing analysis tools
Mobile tools
Reverse engineering tools

TryHackMe rooms

Introduction
- What?
- Why?
- How?
Basic phishing labs
The Greenholt Phish
- Questions
Android malware analysis (Pithus and jadx)
iOS forensics (SQLiteDB)

Root-me challenges

APK anti-debug

Threat landscape @home

Ty Myrddin Home
Unseen University
Improbability Blog
About
Contact

Index

Unseen University, 2024, with a forest garden fostered by /ut7.