SAN FRANCISCO-- March 08, 2022 -- Black Hat, the producer of the cybersecurity industry’s most established and in-depth security events, announces the release of its Briefings and content lineup for Black Hat Asia 2022. Registration is open for the hybrid event offering a virtual only pass and an in-person pass, taking place at Marina Bay Sands in Singapore on May 10 - 13 (GMT +8h). This year’s Briefings lineup will include over 30 talks spanning many topics on information security such as malware, reverse engineering, applied security, exploit development, cloud and platform security and more.

Briefings highlights for 2022 include:

· The Little Seal Bug: Optical Sound Recovery from Lightweight Reflective Objects - This talk introduces “the little seal bug” attack, an optical side-channel attack used to recover sound from lightweight reflective objects. The researchers have conducted a series of experiments to show the air pressure fluctuations off the shiny objects which can be used to eavesdrop on a victim’s conversation. They will then compare the performances of the little seal bug attack to related methods in the studies.
· Hacking Volkswagen Electric Cars - The researchers in this talk discovered numerous vulnerabilities and security problems in car architecture including Volkswagen electric car model ID3. Attendees will learn how “secure” modern electric cars really are.
· The Next Gen PlugX/ShadowPad? A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT - In this talk, the researchers have studied modular malware used in Chinese state-sponsored cyber operations and will give a brief attack timeline of Pangolin8RAT/Tianwu from 2020 to 2021 as well as the outlook on the group’s future development.
· SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets - This presentation will dive into the modus operandi of an SMS PVA service provider, where the researchers uncovered a mobile botnet used to provide SMS reception services. They will discuss the design and operations of the uncovered botnet as well as the use and misuse of the PVA services by other threat actors.

Two- and four-day Trainings will take place on May 10 - 13 with options for in-person training courses and virtual only courses. Training courses will cover various techniques including penetration testing, IoT, malware, application security and many others.

The hybrid Black Hat Arsenal will display the latest tools and products from the open-source community to provide attendees with live demonstrations and hands-on experience. Arsenal will host nearly 30 tools such as malware defense, exploitation and ethical hacking, open-source intelligence and more.