Hacking Multi Factor Authentication

InfraGard Cincinnati Member Alliance

A presentation demonstrating bypassing MFA and other security controls.

MPORTANT NOTE – This will be a hybrid meeting so select the right ticket for whether you are attending in person or virtually. Lunch included for in-person attendees. This presentation is only open to current InfraGard members.Onsite location: Dinsmore - 255 E 5th St #1900, Cincinnati, OH 45202 - see Parking info below under Logistics.<h1>Agenda:</h1>Welcome and FBI Updates (12:30p – 12:45p). Presenters: Chaim Black, President, InfraGard Cincinnati Members Alliance and Special Agent Paul Szawranskyj, Federal Bureau of Investigations.Hacking Multi-Factor Authentication (12:45p – 1:45p). Presenter - Chaim Black, Cybersecurity Analyst at Intrust IT and President of InfraGard Cincinnati Members AllianceAbstract - This presentation will demonstrate modern techniques attackers are using to bypass security controls such as compromising accounts with multi-factor authentication and evasion of email security controls shown from real incidents. Also included will be a live demonstration of a phishing toolkit (EvilGinx2) which can bypass multi-factor authentication using cookie theft commonly used in many recent security incidents impacting major organizations.Bio - Chaim Black is a Cyber Security Analyst at Intrust IT, a Cincinnati based Managed Service Provider. Chaim has specialized in Microsoft 365 Security and investigating Business Email Compromises in the Microsoft 365 platform, and authored the PowerShell module, 365BlueTeamKit, used to assist in these investigations.Case Review of MFA Abuse (2:00 – 2:30)Presenter – Todd Vokas, Special Agent, FBI CincinnatiAbstract – From impersonating corporate tech support to intercepting SMS messages, one particular cyber threat actor has deployed several tactics for defeating multi-factor authentication. Eurasian threat actor IVAN, aka DisneyLandTeam, has successfully wired tens of millions of dollars from corporate bank accounts. Special Agent Vokas will discuss how they do it and what to look out for. Bio - Special Agent Todd Vokas has spent his entire FBI career on Cincinnati's Cyber Task Force first as an intern while in school and then as a Digital Forensic Examiner with the Computer Analysis Response Team. In February of 2020 he reported to New Agent training at Quantico and was assigned back to the Cincinnati Cyber Task Force as a Cyber Agent. SA Vokas works mainly cyber criminal investigations to include a global botnet and a threat actor targeting corporate bank accounts.Closing and Adjournment (2:30)<h1>Logistics</h1>Building Access:Visitors should access the second elevator bank in the First Financial building and take that up to the 19th floor (Dinsmore's conference floor). Receptionists there will check visitor names off the RSVP list and will then direct you to the appropriate space for our event.There are two buildings that are attached to each other, some people end up in the wrong one. Dinsmore is in the one further to the east – First Financial which is at 5th and Sycamore. (PNC is to the west at 5th and Main.)Parking:There is limited street parking along Sycamore and 5th Streets, however only some are two-hour meters. The easiest accessible garage parking is the one attached to the First Financial and PNC buildings. Drivers can navigate to 430 Main Street. If that is full or for another option, you can park just across 5th street from the First Financial Building in the Columbia Plaza Garage. Navigate to 250 East 5th Street for that garage. There is a skywalk to cross over to the First Financial Building. Additional parking can also be found in an open lot on Sycamore and 7th, under Fountain Square, or in the Great American building on 3rd street.Menu / Special Needs:Please indicate if you require a vegetarian option. Email president@infragardcincinnati.org if you have any special needs.

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Hacking Multi Factor Authentication

More events from InfraGard Cincinnati Member Alliance

Discover more events from InfraGard Cincinnati Member Alliance, from Business to other experiences you might love.

Hacking Multi Factor Authentication

More events from InfraGard Cincinnati Member Alliance

Discover more events from InfraGard Cincinnati Member Alliance, from Business to other experiences you might love.

More Business events

Browse more Business events with different dates, prices, and formats to find your next great experience.