Patrick Wardle
where else to find them
what they talk about
where they keep going back
- RSA Conference2 editions2023–2024
all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Xiaolong Bai6 talks
- Niall Merrigan19 talks
- Aaron Bedra14 talks
- Sonia Seddiki13 talks
- Tielei Wang6 talks
- Jason Haddix10 talks
| title | conference | date |
|---|---|---|
| Leveraging MacOS's Networking Frameworks to Heuristically Detect Malware | RSA Conference 2024 | 2024-05-06 |
Claim: host‑based macOS monitoring finds malware by spotting unauthorized network activity. Uses private NetworkStatistics.framework and Network Extension to… | ||
| Mac-ing Sense of the 3CX Supply Chain Attack: Analysis of the macOS Payloads | Black Hat USA 2023 | 2023-08-05 |
Analysis shows the attackers implant a macOS backdoor called pool rat on the 3CX build machine, which surveys the host, decrypts hardcoded strings and fetches… | ||
| Nothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware | Black Hat USA 2023 | 2023-08-05 |
Shows concrete macOS techniques to detect malware by observing host network activity: enumerates sockets via proc_pid APIs, extracts remote endpoints and… | ||
| Making oRAT Go...Further | RSA Conference 2023 | 2023-04-24 |
Reconfigures a UPX packed 10 MB Go binary by extracting and reappending an AES GCM encrypted overlay to point at a lab C2, builds a custom Go C2 using smux to… | ||
| All Your Macs Are Belong To Us ... Again! | RSAC 2022 | 2022-06-06 |
Presenter: Patrick Wardle, Founder, Objective-See
The (sad) reality is most Mac infections occur with inadvertent assistance from the user. Apple, realizing… | ||
| Uncovering OWASP’s Mobile Risks in iOS Apps | AppSec California 2015 | 2015-01-26 |
Shows concrete steps and results: uses AppleScript to automate iTunes download (about 10–15 lines), jailbroken-device techniques to extract unencrypted binary… | ||
| nothing matches | ||