Thread by @stilgherrian

I’ll be tweeting from the APNIC 52 conference this afternoon, starting shortly at 1300 AEST. Program at conference.apnic.net/52/program/sch…. Follow or mute #APNIC52 as you prefer.

My thread from yesterday is attached.

https://twitter.com/stilgherrian/status/1437609547229761536

First up for me is the APNIC - FIRST Security session number one, on the Lazarus Bear Armada (LBA) DDoS campaign, a CSIR case study from Vanuatu, and recent supply chain attacks targeting Mongolia. conference.apnic.net/52/program/sch… #APNIC52

It’ll be on YouTube at .

MC @adliwahid in da house! #APNIC52

And we’re onto the Lazarus Bear Armada (LBA) Bitcoin extortion DDoS campaign, the first time such a campaign has been analysed at scale. #APNIC52

So far this is a statistical analysis of the elements of the DDoD tech stack — open ports, traffic levels, industries attacked, etc. I’ll tweet a link to any document that’s cited with these charts in it. #APNIC52

One interesting note: The attacks were run on weekdays, not weekends, and timed to be in the local daylight hours of the target organisations. #APNIC52

Next: “Cyber Security Incident Response: An Island State Case Study” from Dr Jeffrey Garae of CERT Vanuatu. Slides at conference.apnic.net/52/assets/file… and the same YouTube stream as before. #APNIC52

And finally for this part of the stream, “Recent supply chain attacks targeting Mongolia” from Dr Ogo Mendsaikhan of MNCERT/CC. Slides at conference.apnic.net/52/assets/file… and the same YouTube as before. #APNIC52

It’s broader perspectives like this — from Mongolia and Vanuatu to Japan, Taiwan, and global players — that make the @APNIC conferences so worthwhile. As well as all the other things. Even if I don’t report on every session, I always learn so much. #APNIC52

Very diplomatic, Mongolia. “Suspected: Chinese Speaking Group”. #APNIC52

Next for me, the inimitable Geoff Huston is talking about “Oblivious DNS”, or how we can make DNS surveillance harder. Also on YouTube at . #APNIC52

Geoff always has excellent diagrams. #APNIC52

“Invasion of privacy is invasion of privacy, no matter what colour hat you’re wearing.”

Here’s a relevant blog post, “Improving the privacy of DNS and DoH with oblivion” (16 Dec 2020) blog.apnic.net/2020/12/16/imp… #APNIC52

And here is a picture of Geoff Huston being concerned about DNS. #APNIC52

In the other parallel session, a new cyber crimefighting crew is being formed. Can’t wait for the movie. :) #APNIC52

https://twitter.com/pratimaIceberg/status/1438001951635959809

Currently on my screen is “DNSSEC Key Lifecycles” with Edward Lewis from ICANN. Slides at conference.apnic.net/52/assets/file… and the same YouTube stream. #APNIC52

A bit too stats-heavy to tweet, but fascinating for DNS geeks. Hi to all six of you.

And that’s all from the conference for me, for various reasons. Thanks as always to @apnic for some fantastic stuff. Good luck for the final day tomorrow. I’ll have a piece coming up at @zdnetaustralia before the week ends. Happy cybering to everyone! #APNIC52