Skip to content

BSidesSF 2022 - Rise of the Vermilion ... (Avigayil Mechtinger • Ryan Robinson)

Avigayil MechtingerRyan Robinson

Blue TeamBSides San Francisco24 minAdvancedOpen on YouTube ↗

Analyzes BSidesSF 2022 - Rise of the Vermilion ... (Avigayil Mechtinger • Ryan Robinson) and evaluates key implications for security practitioners.

Summary

BSidesSF 2022 talk by Intezer researchers on Vermilion Strike, the first publicly documented cross-platform Cobalt Strike Beacon reimplementation in real-world attacks. ELF Linux variant was fully undetected, sharing C2 protocol and code with the Windows DLL counterpart, with file upload, shell execution, and DNS/HTTP C2 capabilities.

Related talks