Explore a case study on reversing and repurposing OnionDuke, a suspected Russian government-made Man-in-the-Middle patching system, in this 33-minute Black Hat conference talk. Delve into the inner workings of OnionDuke, discovered by the speaker Joshua Pitts in October 2014, and learn how to select desirable features for use in other tools. Gain insights into the process of malware plagiarism as the speaker demonstrates how nation-state malware can be analyzed and repurposed, challenging the notion that only nation-states and criminals can benefit from reusing sophisticated malware.
Overview
Syllabus
Repurposing OnionDuke: A Single Case Study Around Reusing Nation State Malware
Taught by
Black Hat