BSides Chișinău 2025

Workshop Overview: This intensive hands-on workshop focuses on advanced security analytics through Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms. Participants will gain practical experience in threat detection, incident analysis, and automated response workflows in a realistic laboratory environment.

For two decades, the security industry has promised progress: firewalls, antivirus, EDR, XDR, Zero Trust. Budgets have soared, tools have multiplied. And yet attackers still win with the same tricks. Why? Because while we buy shiny solutions, we continue to neglect the basics.

This keynote cuts through the illusion of progress and shows why culture and discipline - not the next silver bullet product- are the real missing pieces.

This session dives into a sophisticated recruitment scam run by the notorious Lazarus Group on LinkedIn and other job-related platforms. As revealed by Bitdefender Labs, we will uncover how the threat actors use complex methods to deliver malware into what looks like a coding assessment for a job offer. Using advanced social engineering, this scam campaign shows why it's important to stay alert and aware when using any digital service.

During this talk, we will follow the whole infection process, starting with the Javascript Loader & Infostealer, moving to Python scripts that ramp up the damage, and ending with a final payload that doubles down on data theft and connects to the Command and Control (C2) server via The Onion Router (Tor). Attendees will gain a comprehensive understanding of the tactics used by cybercriminals, the potential risks to your organization's security, and strategies to protect against similar attacks.

Dive deep into how threat actors are weaponizing artificial intelligence and discover how the revolutionary Agentic Security Platform is changing the game in cyber defense. Learn how adversaries are leveraging AI in their modern tradecraft and experience firsthand how autonomous AI agents are reshaping SOC operations through real-time reasoning and adaptive response capabilities. The AI versus AI isn't theoretical—it's the current reality of cyber threats. Perfect for threat hunters, detection engineers, and red teamers looking to stay ahead of tomorrow's threats. Join us to master the intersection of AI and cybersecurity, and learn how to harness agentic AI to transform your security operations. Don't just react to threats—predict and prevent them.

This presentation focuses on applying artificial intelligence techniques to malware analysis. The process begins with the collection and examination of malware samples using static analysis methods to extract features. Based on these features, machine learning models are trained and evaluated for their effectiveness in detecting malicious behavior. The performance of different detection models is compared using standard evaluation metrics.

Following detection, attention shifts to analyzing sequences of harmful API calls commonly used in malware operations. These sequences are decomposed to identify patterns and extract key indicators of compromise. The goal is to isolate relevant behavioral data that can enhance both detection accuracy and response strategies.

By integrating AI-driven analysis with traditional cybersecurity workflows, this work aims to close the gap between data science and threat intelligence, improving the efficiency and precision of malware detection systems.