Your Company Through the Eyes of an Info Stealer, with Jesse Hoppo

Information stealing malware is not new and not sophisticated. That is precisely what worries Jesse Hoppo, who leads the open source intelligence and cyber crime team within Telstra's Threat Research and Intelligence Group, and who spends a good deal of his time reading what these things send home. Recorded at AdelaideSEC, Jesse joins David Savva-Willett after his talk on what an organisation looks like through an info stealer's eyes. He explains how the malware arrives, usually by persuading someone to run a command themselves rather than through any exploit, and what a single log actually holds: browser credentials, session cookies, clipboard contents, search history, a screenshot of the desktop, whatever documents looked interesting. His central reframe is that the useful question is not what an attacker can do with a stolen password, but what they can do as that person. He also describes the browser password sync problem that quietly carries corporate credentials onto home machines, the exposure a single employee device can create, and the hardest question he has tried to answer for a large organisation: where are all the places your people can log in and access data? The conversation closes on what actually helps, for organisations and for individuals, including why he would rather you used any dedicated password manager than the one built into your browser.