Mike Vriesema
Mike is a Primary Technical Investigator in Accenture's Global Cyber Response team, leading end-to-end DFIR engagements across large-scale cyber incidents worldwide. With over five years at Accenture and a First Class Honours degree in Cyber Security & IT Forensics from the University of Limerick, he brings deep expertise in incident response and threat intelligence. Mike is a GIAC Advisory Board member and holds certifications including CISSP, GCFA, and GX-FA (and a bunch of other alphabet soup).
Session
If the Lumma and Vidar stealers taught us one thing, it's that literally anything can be used as a Command and Control channel. DNS TXT records, Pastebin drops, Steam profiles, telegram, discord - if it can carry a string, it can carry instructions.
This talk takes a blue team lens to the unconventional C2 landscape. We'll explore how platforms such as Steam and a handful of other legitimate services, are being quietly abused for command delivery and exfiltration. Hiding in plain sight behind trusted domains and allowlisted traffic. No blocked ports, no suspicious destinations, no alerts.