Talent Need Not Apply - Tradecraft and Objectives of Job-themed APT Social Engineering

Explore the sophisticated tactics of advanced persistent threats (APTs) from North Korea and Iran using job-themed social engineering in this 36-minute Black Hat conference talk. Uncover the profiles of three distinct threat actors: North Korea's Lazarus Group and Black Alicanto, the emerging Iranian Yellow Dev 13, and a group targeting former intelligence officers. Delve into the intrusion chains, recruitment strategies, and specific personas like Abigail Walker and Brian Claire used in these operations. Gain insights into the tradecraft and objectives behind these deceptive campaigns, learning how APTs exploit job-seeking vulnerabilities for malicious purposes.