{"id":66214,"date":"2026-08-27T14:45:56","date_gmt":"2026-08-27T12:45:56","guid":{"rendered":"https:\/\/www.secuinfra.com\/event\/bsides-munich-2026\/"},"modified":"2026-08-27T14:45:56","modified_gmt":"2026-08-27T12:45:56","slug":"bsides-munich-2026","status":"publish","type":"tribe_events","link":"https:\/\/www.secuinfra.com\/en\/event\/bsides-munich-2026\/","title":{"rendered":"BSides Munich 2026"},"content":{"rendered":"<p>On November 7, 2026, Munich will become the gathering place for the cybersecurity community: At BSides Munich 2026, we at SECUINFRA will take current cyber threats from theory and put them directly into practice. In our interactive, <strong>hands-on workshop<\/strong> \u201cA Phishing Trip with Fancy Bear \u2013 Let\u2019s Analyze APT Malware Together!\u201d we\u2019ll take participants on a journey through the entire attack chain of a real Fancy Bear campaign (APT28\/GRU)\u2014from the first phishing email to command-and-control communication. <\/p>\n<p>In five chapters that build on one another, we will examine real-world artifacts together and demonstrate how modern APT attacks work from a technical perspective and how they can be systematically analyzed. The agenda includes, among other things, the analysis of email headers and indicators of compromise, the examination of a weaponized RTF document\u2014including MIME type mismatches and OLE\/COM abuse to exploit CVE-2026-21509\u2014 persistence via file staging and scheduled tasks, as well as LSB steganography in PNG files. In addition, we will decrypt simple XOR and Base64 obfuscation using CyberChef and demonstrate how attackers abuse legitimate open-source tools such as the Covenant C2 Framework and trusted cloud services to conceal their activities within normal network traffic.  <\/p>\n<p>A custom-developed interactive training platform guides participants through each step of an attack, makes progress in the analysis immediately visible, and allows participants to directly test their own insights using targeted questions. The workshop is beginner-friendly and consistently hands-on. All tools used\u2014including oletools, CyberChef, and Covenant\u2014are free and open source. This means the analysis techniques demonstrated can be immediately replicated after the event and applied to your own security practices.   <\/p>\n<p>For us, effective cyber defense means not only being aware of attacks, but truly understanding their mechanisms. This is exactly the kind of understanding we want <strong>to convey <\/strong>at <strong>BSides Munich 2026 <\/strong>\u2014practical, technically sound, and based on a threat actor that vividly demonstrates the challenges modern security teams must face. <\/p>\n<p>We&#8217;re looking forward to BSides Munich 2026 and to taking a closer look at Fancy Bear together with the community.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On November 7, 2026, Munich will become the gathering place for the cybersecurity community: At BSides Munich 2026, we at SECUINFRA will take current cyber threats from theory and put [&hellip;]<\/p>\n","protected":false},"author":33,"featured_media":66213,"template":"","meta":{"_acf_changed":false,"_tribe_events_status":"","_tribe_events_status_reason":"","dpc_author_order":[],"footnotes":""},"tags":[],"tribe_events_cat":[],"class_list":["post-66214","tribe_events","type-tribe_events","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tribe_events\/66214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tribe_events"}],"about":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/types\/tribe_events"}],"author":[{"embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/users\/33"}],"version-history":[{"count":0,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tribe_events\/66214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/media\/66213"}],"wp:attachment":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/media?parent=66214"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tags?post=66214"},{"taxonomy":"tribe_events_cat","embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tribe_events_cat?post=66214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}