Understanding the Value and Limitations of IOCs in Cybersecurity

Episode sponsors:

• Binarly, the supply chain security experts (https://binarly.io)
• FwHunt (https://fwhunt.run)

Costin Raiu has spent a lifetime in anti-malware research, working on some of the biggest nation-state APT cases in history, including Stuxnet, Duqu, Equation Group, Red October, Turla and Lazarus.

In this exit interview, Costin digs into why he left the GReAT team after 13 years at the helm, ethical questions on exposing certain APT operations, changes in the nation-state malware attribution game, technically impressive APT attacks, and the 'dark spots' where future-thinking APTs are living.

Links:

• Costin Raiu on Twitter
• How to Protect Your Phone from Pegasus and Other APTs
• Costin Raiu: 10 big 'unattributed' APT mysteries
• Costin Raiu on the .gov mobile exploitation business
• WannaCry Ransomware Linked to North Korean Hackers