Effects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger скачать в хорошем качестве

Effects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger

BSides Edmonton September 23-24, 2024 Talk: The Effects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger Abstract: Weaponized malware, designed with the intent to cause harm or damage to computer systems, mobile devices, networks, or individuals, has emerged as a significant threat, particularly in the realm of spyware. Today, many of these sophisticated tools are developed by commercial surveillance vendors (CSVs) who now surpass governments in creating tools for intelligence operations and cyber warfare. You will learn about the current threat landscape of weaponized malware, its key players, and its impact on end-to-end encryption (E2EE) and secure messaging applications like Signal Messenger. Focusing on spyware, we can see how these tools, marketed as "lawful intercept," are often abused for espionage and surveillance beyond their intended uses. We will explore prominent examples, including NSO Group's Pegasus, Intellexa's Predator, and others, highlighting their capabilities and the ethical, legal, and security concerns they raise. Providing insights into how weaponized malware operates, from initial infection to data exfiltration, and the steps involved in compromising a mobile device. We will also discuss physical exploits used by companies specializing in data extraction from devices, such as Cellebrite and Magnet Forensics, and the vulnerabilities they exploit. In examining the effects on E2EE, we will trace the evolution of encryption protocols from PGP to the Signal Protocol, underscoring their strengths in protecting data in transit. However, despite these advances, the ability of malware to exfiltrate data from even the most secure messaging applications, like Signal, remains a critical issue. Key takeaways will include the necessity of robust cybersecurity measures for high risk users, the importance of continuous advancements in encrypted storage technologies, and the need for developers to prioritize security, especially in mobile applications. The discussion will highlight how weaponized malware can undermine encryption and the specific techniques used to extract encrypted Signal messages, emphasizing the ongoing battle to protect sensitive information in an increasingly digital world. Speakers: Geoffrey Green 2024 Slides: https://drive.google.com/drive/u/0/fo...