SANS Cyber Threat Intelligence Summit 2024
Catch InQuest CINO Darren Spruell’s presentation, “Tendrils in the Mist: Criminally Aligned Hosting Networks Seeking Legitimacy in the West” on Tuesday 1/30 at 3:10 pm ET.
About the presentation: In a world complicated by sanctions and aggressive law enforcement, marked by a rise in malware-as-a-service offerings, demand for resilient hosting in the criminal underground is as high as ever. Today’s threat analysts are adept at analyzing criminal conspiracies with a cross-discipline approach, blending network indicators and endpoint analysis. How do illicit hosting providers fill this need while not looking immediately suspicious when they come on the internet? This presentation describes how Eastern European hosting operations emerge, seek offshore cover in Western countries, and provide services to criminal services operators. We additionally discuss tools and processes that are useful for tracking and combating these networks in our own intelligence programs