How doing the basics well still works. The success of the largest group attacking the financial sector in Brazil.
For years, the cybersecurity industry has been concerned with advanced attacks such as APTs, ransomware, 0-days, among others. On the other hand, companies invest millions in solutions that promise protection against all these attacks.
The purpose of the lecture is to present how Spider Plump, a group focused on financial attacks, has been successful in its attacks on companies in the sector in Brazil, moving billions.
During the presentation, the group's TTPs (Tactics, Techniques, and Procedures) will be discussed, as well as how these TTPs have been effective in the group's attacks. It will also be discussed how detective and protective measures have failed significantly in victim companies.
At the end, some suggestions for best defense practices will be provided that can be applied not only to attacks by this group, but also to various other types of attacks of the same nature.