Agenda

Exchange servers under siege from at least 10 APT groups

Wed Apr 28 / 14:20 - 14:50 CEST
10. Mathieu Tartare (ESET) - Senior Malware Researcher

Mathieu Tartare (ESET)

Senior Malware Researcher
11. Matthieu Faou (ESET) - Senior Malware Researcher

Matthieu Faou (ESET)

Senior Malware Researcher

In this presentation, ESET Researchers Mathieu Tartare and Matthieu Faou will highlight 10 different cyber-espionage groups that abused the recent Microsoft Exchange vulnerabilities (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) in order to breach important organizations, including governments, all around the world in March 2021.

The presentation will provide a detailed timeline of the events and statistics from ESET LiveGrid® telemetry to show the wide scope of this attack. Thanks to their long-term tracking of the threat actors involved in this campaign, researchers will also provide background information and an overview of the typical Tactics, Techniques, and Procedures (TTPs) used by the attackers.

From neutrino hunter during his PhD studies in physics, to malware hunter through high-performance computing, Mathieu Tartare likes to understand how things work. In 2018, he decided to make his passion for Infosec and reverse engineering his trade by joining ESET as a malware researcher within the security intelligence program.

Matthieu Faou is a malware researcher at ESET specializing in targeted attacks. His main duties include threat hunting and reverse engineering APTs. He finished his Master’s degree in computer science at École Polytechnique de Montréal, Canada and at École des Mines de Nancy, France in 2016. In the past, he has spoken at multiple conferences including BlueHat, RECON, Virus Bulletin, and Botconf.