For years, cyber security teams have focused on preventing malware, blocking phishing emails, and detecting malicious activity on endpoints.
But what happens when the attacker already looks like someone you know?
Recent JUMPSEC research analyses the source code used in an active operation conducted by Lazarus sub-group BlueNoroff which targets organisations through compromised trusted contacts, fake Zoom and Teams meetings, wallet reconnaissance, and ClickFix malware delivery.
In parallel, our ‘Project Havoc‘ research demonstrated how low-cost, publicly available tooling can be used to create convincing real-time synthetic identities capable of deceiving employees during live video calls, expanding the attack surface from account compromise to identity itself.
In this webinar, JUMPSEC researchers and detection engineers will walk through the evolution of these techniques, demonstrating how adversaries are blending malware delivery with social engineering, and exploring what security leaders should be doing now to prepare.
