Abstract: This presentation focuses on the various attack vectors and techniques used in mobile black and gray market activities, such as ad fraud and deepfakes. It will break down how these activities infiltrate and operate within mobile ecosystems. Additionally, the talk outlines a comprehensive defense strategy that encompasses threat intelligence, forensics, and detection tools. This strategy culminates in the development of a mobile security risk engine. This end-to-end framework is designed to proactively identify, block, and neutralize these types of attacks, with real-world case studies demonstrating its effectiveness in mitigating risks.

About: YuanPeng Zhu is the Head of Black and Gray Industry Countermeasures at vivo kM1rr0rs Security Lab, where he focuses on combating black and gray market activities within the mobile security sector. His work primarily involves managing malicious applications and developing threat intelligence systems. YuanPeng has successfully led various special countermeasure projects aimed at addressing new variants of malicious apps and methods of industrial chain attacks, significantly reducing potential large-scale security risks for users. In addition to his project work, YuanPeng has delivered keynote speeches at professional summits, including China's SDC and the Threat Hunter Salon. During these events, he has shared innovative countermeasure ideas and technical practices relevant to the industry.

Abstract: The convergence of artificial intelligence and cybersecurity is reshaping the threat and defense landscape at an unprecedented speed. AI now acts as both a powerful defender and a highly capable attacker; automating reconnaissance, crafting sophisticated phishing campaigns, generating adaptive malware, and exploiting vulnerabilities invisible to traditional tools. At the same time, defenders are deploying AI for detection, response, and predictive analysis, while struggling with new risks such as model poisoning, prompt injection, data leakage, and opaque decision-making. This is no longer a theoretical frontier; it’s an operational reality that demands new strategies, architectures, and governance to secure intelligent systems before the gap between.

About: Pasi Koistinen is a cybersecurity executive, author, and speaker with over 25 years of experience protecting digital infrastructures across startups, financial institutions, and global enterprises. Currently, the CISO at a major cryptocurrency platform in Singapore, and he specializes in securing environments shaped by blockchain, AI, and digital finance. An entrepreneur in offensive security testing, threat intelligence, and adversary simulation, Pasi holds multiple industry certifications and received the ASEAN CSO30 Award in 2024. He frequently speaks at international conferences and is an author of multiple books that bridge technical cybersecurity and strategic leadership.

Abstract: The presentation will first introduce the HoneyMyte profile, focusing on observed victimology across multiple campaigns, shedding light on targeted sectors, regional trends, and potential strategic objectives. In this case, we will focus on attacks that happened in Southeast Asia. Then, we will cover a range of implants and tools used by the group, from PlugX and ToneShell to lesser-known payloads like ToneDisk, ToneIns, Qreverse, keyloggers, document stealers, and custom credential arvesters. There’s also a look at how proxyware like StarProxy has been used for covert communications and persistence. The talk will then further discuss attribution, supported through analysis of infrastructure, code reuse, and operational tradecraft that collectively point toward HoneyMyte’s involvement.

About: Fareed Radzi is a Security Researcher at Kaspersky with a focus on malware analysis, threat intelligence, and reverse engineering. His research often centers on APT activity in Asia, with particular interest in espionage-driven malware and tooling. He has over five years of experience in malware reverse engineering and regularly presents at community talks, trainings, and local and global conferences across the region.