Overview
This course aims to teach learners how to deconstruct APT28's XAgent for OSX, focusing on its spying capabilities like key-logging, screen grabbing, and file exfiltration. The course is designed to equip participants with the skills to analyze and understand the advanced cyber espionage techniques employed by APT28 on macOS systems. The teaching method involves deconstructing the XAgent for OSX to uncover its functionalities and operations. This course is intended for individuals interested in cybersecurity, threat intelligence, and malware analysis.
Syllabus
BSidesSF 2018 - Deconstructing APT28's XAgent for OSX (Tiberius Axinte)
Taught by
Security BSides San Francisco