AlemdarIslamoglu-从获取到归因追踪中国移动监控行动

Tracing Mobile Chinese Surveillance Operations fromAcquisition to AttributionKristina BalaamAlemdar Islamoglu® Lookout, Inc. | Confidential and Proprietary2Who We AreAlemdar IslamogluSenior Staff Security Intelligence Researcher●Focuses on mobile APT activity from North Korea and the Middle East.●Recent public work: Hermit, BouldSpy and GuardZoo●Extensive experience in reverse engineering, penetration testing, and security software development. https://www.linkedin.com/in/alemdarh/Kristina BalaamSenior Staff Security Intelligence Researcher●Primarily focuses on campaigns initiated by Chinese threat actors.●Recent reporting: DragonEgg/WyrmSpy, MOONSHINE & Android BadBazaar●Passion for uncovering threats that target marginalized populations within mainland China and abroad.https://linkedin.com/in/kebalaamAgenda▪The Chinese Mobile Surveillance Landscape▪EagleMsgSpy: A Lawful Intercept Tool▪Bypassing packers▪Attributing EagleMsgSpy▪Connections to Public Security Bureaus® Lookout, Inc. |