BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Haetae: An Agent to Takedown North Korean C2 Servers
 \n   Tags: Red Team Village | Misc\n   When: Friday\, Aug 7\, 16:00 - 17:5
 9 PDT\n   Where: LVCCW Level 1 Hall 1 309 (Red Team Village) Tactic Table 
 3 -\n   [1]Map\n\n   Description:\n\n   In this talk\, we introduce Haetae
 \, an agent designed to profile\,\n   identify\, and exploit C2 frameworks
  used by North Korean malware.\n\n   Haetae supports both automated and in
 teractive modes\, allowing\n   analysts to map and understand adversary in
 frastructure with different\n   levels of control. It is built around a fl
 exible rule-based system\,\n   enabling users to extend and refine detecti
 ons as new patterns and\n   frameworks emerge.\n\n   In this first release
 \, we will walk through real-world cases where\n   Haetae was used to iden
 tify and take down infrastructure associated\n   with Mach-O Man and POWer
 ful Armadillo.\n\n   We will also release a safe emulator of both malware 
 C2 servers\,\n   allowing researchers and newcomers to experiment with Hae
 tae in\n   realistic\, controlled environments without risk.\n\n   This is
  a highly technical talk but can be enjoyed by both beginners\n   and seas
 oned threat hunters.\n\n   Speakers:Mauro Eldritch\,Nelson Rafael Colón M
 erán\n\n   SpeakerBio:  Mauro Eldritch\, Leader at Bitso Quetzal Team\n\n
    Hacker and Speaker.\n\n   Founder of BCA LTD and DC5411.\n\n   I wrote 
 a book interviewing Threat Actors.\n\n   I like Threat Intelligence and Go
 lden Retrievers.\n\n   SpeakerBio:  Nelson Rafael Colón Merán\, Security
  Engineer at Bitso\n\n   Security Engineer at Bitso\, Latin America's lead
 ing crypto-first\n   financial platform. I've specialized in red team oper
 ations\,\n   penetration testing\, and malware development.\n\n   Recogniz
 ed speaker in the Dominican Republic's RedTeamRD cybersecurity\n   communi
 ty\, where I've given a couple talks and previously assisted\n   DEFCON as
  a speaker.\n\n   '\n\n   1. #LVCCW_Level1_Hall1\n\n\n
DTEND:20260808T005900Z
DTSTART:20260807T230000Z
LOCATION:Red Team Village - LVCCW Level 1 Hall 1 309 (Red Team Village) Tac
 tic Table 3
SUMMARY:Haetae: An Agent to Takedown North Korean C2 Servers
END:VEVENT
END:VCALENDAR
