FireEye Intelligence arrived at a high confidence assessment that the TRITON attack was sponsored by a Russian Government-owned research laboratory. This talk will share analysis to illustrate the process followed to connect the dots. It highlights some creative research techniques and pivot points used in this analysis and will share how other organizations can use FireEye's public reporting to hunt for evidence of the same attacker.
Yihao Lim is a Senior Cyber Threat Intelligence Analyst at FireEye. He focuses on identifying and proactively dealing with cyber security threats for his clients in Asia Pacific. Yihao is well-versed in monitoring intelligence sources for actionable indicators/information, including... Read More →