Matei Radulea is a Security Researcher within Keysight’s Application and Threat Intelligence Research Center. Matei had previous experience in Vulnerability Management and Incident Response and now is responsible with Malware Analysis. Matei’s working in the investigation of the latest malware and developing methods of detection. Matei’s passions are Cyber Security in general and he loves CTFs. Other than Cyber Security he is an avid cyclist (fixed/road).

Tell us More: How to Harden Your Sandboxes against malware evasions

Threat actors are very aware of the threat intelligence teams strategies to understand how they operate. One of these strategies is detonating the malware in a safe environment, in a separate network, which is known as sandboxing. Therefore, a lot of malwares will attempt to detect if it is executed in a sandbox and cease execution altogether, to avoid giving away details about their goals and infrastructure used for infection and spread. In this talk, we document such malware tactics observed in-the-wild and offer possible mitigations against them.

This presentation is co-presented with Radu Chiscariu, Security Researcher within Keysight’s Application and Threat Intelligence Research Center.