Hourglass Model 2.0 - Case Study of Southeast Asia Underground Services Abusing Global 2FA

Explore the Hourglass Model 2.0, a research framework for gathering security intelligence from underground marketplaces, in this 41-minute Black Hat conference talk. Delve into a case study of Southeast Asian underground services abusing global two-factor authentication (2FA) systems. Learn about the model's scope, research plan, and key findings, including fraud and monetization flows, overall workflow, and 2FA abuse methods. Gain valuable insights for threat prevention and mitigation plan development, even with limited access to underground marketplaces. Presented by Anna Chung, this talk provides essential takeaways for cybersecurity professionals and researchers interested in understanding and combating sophisticated underground services.