SecTalks

This presentation explores Staying Under the Radar- Evasion in Modern Malware.
After RSVP, please ensure to get your admission ticket from Humantix: https://events.humanitix.com/staying-under-the-radar-evasion-in-modern-malware-sectalks-syd0x60-96th

Thanks to you for
1. Keeping your RSVP up-to-date. We are usually overbooked and have a long waitlist. We will sign you in and keep track of RSVPs and attendance.
2. Aligning with SecTalks' no-bullshit code of conduct
3. Keeping the venue nice and tidy during and after the session

# Presentation

Title: Staying Under the Radar- Evasion in Modern Malware

In many scenarios, malware is designed to persist on a system for extended periods of time. To achieve this, it must effectively evade detection by defensive solutions. While defenders continuously study malware samples discovered in the wild, adversaries are equally focused on developing ways to bypass those defences, leading to an ongoing arms race between attackers and security researchers.

In this session, we’ll begin by exploring the fundamentals of malware detection, from traditional signature-based methods to detecting suspicious behaviour. Building on this foundation, we’ll dive into how modern malware leverages weaknesses in detection logic to disguise its presence and evade endpoint and network defences.
While modern malware comes equipped with various evasion techniques, this session will focus on two powerful ones, sleep obfuscation and call-stack spoofing. These techniques will be broken down to understand how they're effective against modern defences and what makes them challenging to detect.

# Speaker: Bharat Bharadwai
Currently a student at Macquarie University. I have previously worked as a Red Teamer at a fintech, focusing on adversary emulation and malware analysis. I’ve had some experience with web, mobile, and thick client assessments. I enjoy learning about offensive security and exploring how malware works to understand detection and evasion techniques better.
LinkedIn Twitter

How to find us on the day?
An organiser will be on the bottom floor until 6:15 to help attendees access the lifts.

# Speed hiring

There is an opportunity for potential employers to do an impromptu 30-second description of their open role. If you are interested, speak with one of the organisers before the start of the session.
Please note the best way to support SecTalks and tell others about your open roles is through sponsorship. We encourage companies, small or large, to come forward and support their local community.

# Sponsors

• Google
• SecDim
• TikTok
• Droneshield
• Atlassian - Venue Sponsor
• Tanto Security

# Notes

• For sponsoring SecTalks Sydney and supporting the non-profit community, contact sydney@sectalks.org
• To speak and submit CTF challenges at SecTalks, fill out https://sessionize.com/sectalks