Know Your Adversary: Counter Operations That Wreck Global Cybercrime
Most cybercrime stories end the same way. The victims get hit, and the cybercriminals walk. This one ended in handcuffs.
Silk Typhoon (fka HAFNIUM) ran since 2016: state-backed, contractor-powered, built like an industrial enterprise. When defenders closed in on the 2021 Microsoft Exchange campaign, the group scaled up instead of retreating, mass-exploiting systems to bury its real intent. The press called it "limited." Our team was already inside the attackers' own infrastructure, mapping every compromised system and all 88,000 web shells in real time.
Newer groups like ShinyHunters and Icarus have picked up where they left off. Beating them takes the same work: eyes on the servers, the attack rebuilt from the inside.
In this on-demand virtual event, John Hammond and Kyle Hanslovan go inside the war room with FBI Cyber Division Assistant Director Brett Leatherman to unpack Operation Riptide and the five-year manhunt behind the arrest.
Featuring:
John Hammond
Kyle Hanslovan
Brett Leatherman