{"id":66086,"global_id":"www.secuinfra.com\/de\/?id=66086","global_id_lineage":["www.secuinfra.com\/de\/?id=66086"],"author":"33","status":"publish","date":"2026-08-12 12:08:53","date_utc":"2026-08-12 10:08:53","modified":"2026-08-12 12:51:04","modified_utc":"2026-08-12 10:51:04","url":"https:\/\/www.secuinfra.com\/de\/event\/bsides-frankfurt-2026\/","rest_url":"https:\/\/www.secuinfra.com\/de\/wp-json\/tribe\/events\/v1\/events\/66086","title":"BSides Frankfurt 2026","description":"<p>Am <strong>10. und 11. September 2026<\/strong> bringt die <strong>BSides Frankfurt<\/strong> die Cybersecurity-Community an der Goethe-Universit\u00e4t Frankfurt zusammen. Die Community-Konferenz steht f\u00fcr technischen Tiefgang, offenen Wissensaustausch und praxisnahe Security und hier sind wir\u00a0mit einem eigenen Hands-on-Workshop vertreten.<\/p>\n<h3>A phishing trip with Fancy Bear \u2013 Let&#8217;s analyze APT malware together!<\/h3>\n<p><strong>Freitag, 11. September 2026 | 14:00 Uhr | Room 1<\/strong><\/p>\n<p>Wie entwickelt sich eine gezielte Phishing-Attacke vom ersten Kontakt bis zur aktiven Command-&amp;-Control-Kommunikation? Im einsteigerfreundlichen Hands-on-Workshop von Marius Genheimer verfolgen die Teilnehmenden die vollst\u00e4ndige Angriffskette einer realit\u00e4tsnahen <strong>Fancy-Bear-Kampagne (APT28\/GRU)<\/strong> \u2013 Schritt f\u00fcr Schritt und anhand echter Artefakte.<\/p>\n<p>\u00dcber eine eigens entwickelte interaktive Trainingsplattform analysieren wir gemeinsam <strong>Phishing-E-Mail-Header, ein weaponisiertes RTF-Dokument, Malware-Samples und einen C2-Implant<\/strong>. F\u00fcnf aufeinander aufbauende Kapitel f\u00fchren vom Threat-Actor-Hintergrund \u00fcber Payload Delivery, Exploitation und Persistence bis zu Installation und Command &amp; Control. Integrierte Quizfragen machen Analysefortschritte unmittelbar sichtbar und sorgen daf\u00fcr, dass auch komplexe Angriffstechniken nachvollziehbar bleiben.<\/p>\n<p>Im technischen Deep Dive zeigen wir unter anderem, wie sich <strong>Indicators of Compromise aus Mail-Headern extrahieren<\/strong>, manipulierte Office-Dokumente und <strong>MIME-Type-Mismatches<\/strong> erkennen sowie <strong>OLE\/COM-Object-Abuse im Zusammenhang mit CVE-2026-21509<\/strong> untersuchen lassen. Wir analysieren Persistence-Techniken wie <strong>File Staging und Scheduled-Task-Abuse<\/strong>, entdecken <strong>LSB-Steganografie in PNG-Dateien<\/strong> und entschl\u00fcsseln einfache <strong>XOR- und Base64-Obfuscation mit CyberChef<\/strong>.<\/p>\n<p>Dar\u00fcber hinaus werfen wir einen Blick darauf, wie professionelle Threat Actors legitime Open-Source-Technologien wie das <strong>Covenant C2 Framework<\/strong> zweckentfremden und vertrauensw\u00fcrdige Cloud-Dienste nutzen, um sch\u00e4dliche Kommunikation im normalen Netzwerkverkehr zu verbergen. Gerade f\u00fcr Security-Verantwortliche zeigt die Analyse damit sehr konkret, welchen Herausforderungen moderne Cyber-Defense-Teams bei der Erkennung hochentwickelter Angriffe begegnen.<\/p>\n<p>Das Beste: Die im Workshop eingesetzten und demonstrierten Werkzeuge \u2013 darunter <strong>oletools, CyberChef und Covenant<\/strong> \u2013 sind frei und Open Source. Die gezeigten Analyseans\u00e4tze lassen sich damit unmittelbar nachvollziehen, reproduzieren und in die eigene Security-Praxis \u00fcbertragen.<\/p>\n<p>Wir freuen uns auf Sie.<\/p>","excerpt":"","slug":"bsides-frankfurt-2026","image":{"url":"https:\/\/www.secuinfra.com\/wp-content\/uploads\/MKA-104-BSides-Frankfurt-Linkedin-Creative-VA-Header.png","id":66085,"extension":"png","width":1080,"height":600,"filesize":502840,"sizes":{"medium":{"width":800,"height":444,"mime-type":"image\/png","filesize":277759,"url":"https:\/\/www.secuinfra.com\/wp-content\/uploads\/MKA-104-BSides-Frankfurt-Linkedin-Creative-VA-Header-800x444.png"},"thumbnail":{"width":300,"height":300,"mime-type":"image\/png","filesize":92441,"url":"https:\/\/www.secuinfra.com\/wp-content\/uploads\/MKA-104-BSides-Frankfurt-Linkedin-Creative-VA-Header-300x300.png"},"medium_large":{"width":768,"height":427,"mime-type":"image\/png","filesize":262298,"url":"https:\/\/www.secuinfra.com\/wp-content\/uploads\/MKA-104-BSides-Frankfurt-Linkedin-Creative-VA-Header-768x427.png"}}},"all_day":true,"start_date":"2026-09-10 00:00:00","start_date_details":{"year":"2026","month":"09","day":"10","hour":"00","minutes":"00","seconds":"00"},"end_date":"2026-09-11 23:59:59","end_date_details":{"year":"2026","month":"09","day":"11","hour":"23","minutes":"59","seconds":"59"},"utc_start_date":"2026-09-09 22:00:00","utc_start_date_details":{"year":"2026","month":"09","day":"09","hour":"22","minutes":"00","seconds":"00"},"utc_end_date":"2026-09-11 21:59:59","utc_end_date_details":{"year":"2026","month":"09","day":"11","hour":"21","minutes":"59","seconds":"59"},"timezone":"Europe\/Berlin","timezone_abbr":"CEST","cost":"","cost_details":{"currency_symbol":"\u20ac","currency_code":"EUR","currency_position":"suffix","values":[]},"website":"https:\/\/bsidesfrankfurt.org\/","show_map":false,"show_map_link":false,"hide_from_listings":false,"sticky":false,"featured":false,"categories":[],"tags":[],"venue":{"id":57205,"author":"33","status":"publish","date":"2025-02-24 14:40:23","date_utc":"2025-02-24 13:40:23","modified":"2025-04-16 15:35:04","modified_utc":"2025-04-16 13:35:04","url":"https:\/\/www.secuinfra.com\/de\/veranstaltungsort\/frankfurt\/","venue":"Frankfurt am Main","slug":"frankfurt","country":"Germany","json_ld":{"@type":"Place","name":"Frankfurt am Main","description":"","url":"","address":{"@type":"PostalAddress","addressCountry":"Germany"},"telephone":"","sameAs":""},"show_map":true,"show_map_link":true,"global_id":"www.secuinfra.com\/de\/?id=57205","global_id_lineage":["www.secuinfra.com\/de\/?id=57205"]},"organizer":[{"id":58473,"author":"33","status":"publish","date":"2025-05-14 14:45:29","date_utc":"2025-05-14 12:45:29","modified":"2025-05-14 14:45:29","modified_utc":"2025-05-14 12:45:29","url":"https:\/\/www.secuinfra.com\/de\/veranstalter\/bsides\/","organizer":"BSides","slug":"bsides","json_ld":{"@type":"Person","name":"BSides","description":"","url":"","telephone":"","email":"","sameAs":""},"global_id":"www.secuinfra.com\/de\/?id=58473","global_id_lineage":["www.secuinfra.com\/de\/?id=58473"]}],"custom_fields":[],"json_ld":{"@context":"http:\/\/schema.org","@type":"Event","name":"BSides Frankfurt 2026","description":"&lt;p&gt;Am 10. und 11. September 2026 bringt die BSides Frankfurt die Cybersecurity-Community an der Goethe-Universit\u00e4t Frankfurt zusammen. Die Community-Konferenz steht f\u00fcr technischen Tiefgang, offenen Wissensaustausch und praxisnahe Security und hier [&hellip;]&lt;\/p&gt;\\n","image":"https:\/\/www.secuinfra.com\/wp-content\/uploads\/MKA-104-BSides-Frankfurt-Linkedin-Creative-VA-Header.png","url":"https:\/\/www.secuinfra.com\/de\/event\/bsides-frankfurt-2026\/","eventAttendanceMode":"https:\/\/schema.org\/OfflineEventAttendanceMode","eventStatus":"https:\/\/schema.org\/EventScheduled","startDate":"2026-09-10T00:00:00+02:00","endDate":"2026-09-11T23:59:59+02:00","location":{"@type":"Place","name":"Frankfurt am Main","description":"","url":"","address":{"@type":"PostalAddress","addressCountry":"Germany"},"telephone":"","sameAs":""},"organizer":{"@type":"Person","name":"BSides","description":"","url":"","telephone":"","email":"","sameAs":""},"performer":"Organization"}}