DEATHCon

Definitely ask me again around April or May next year if you want to volunteer to help run the site. We'll be in Seattle next year and alternating with Tacoma every other year

Which in person site did you want to go to? Maybe we can get you in as a volunteer next year

The in person tickets are all priced to just cover the cost of the venue and food and server infrastructure, since there are no corporate sponsors. I'm going to work on doing a less expensive party next year in Seattle to get the ticket price down for in person

There are a few online tickets available now. We converted the last unsold tickets from Tacoma and Orlando to online tickets (same total 512 participants, just shifted some from in-person to online).

www.eventbrite.com/e/deathcon-2... and eventbrite.com/e/1380133760229

Oh sorry to hear that if you can't travel! Yes of course you can still do all the workshops online and you'll have full access. Which site were you going to?

Thank you so much! We have enough volunteers already and are hard at work getting the lab built

Malicious Windows shortcut (LNK) files on the WebDAV server. Both are the same file with different names.

Traffic from the initial infection filtered in Wireshark.

Malware that was persistent on the infected Windows host.

Post-infection traffic generated by the peristent malware.

2025-10-10 (Friday): Was looking for Koi Loader/Koi Stealer, and I found this #WebDAV server that hosted malicious Windows shortcut (#LNK) files.

Not sure what type of #malware this is, but it's not Koi Stealer.

Details at github.com/malware-traf...

a black and white photo of a skeleton against a dark background ALT: a black and white photo of a skeleton against a dark background

Time is running out to get a ticket for DEATHCon 2025 in person locations! If you want a t-shirt, order by October 11. Last day to buy a ticket is October 31
deathcon.io/tickets.html

We're very sorry to hear that and wish that your team could have joined us remotely this year. We doubled the number of available tickets since last year and next year will double it again, but this year all the remote tickets are sold. There are still in person tickets for several sites

Tickets will be available in just over 4 1/2 hours from now!

and using Microsoft Sentinel, Elastic, and maybe Splunk to query the logs while doing purple team experiments with C2 servers we set up! Learn about the workshops scheduled at deathcon.io

DEATHCon has an unusual format of 100% hands-on workshops for Detection Engineering and Threat Hunting skills, all of them available online by connecting your local VMs to our global detection engineering lab via Tailscale...

Kuala Lumpur: 17 seats remaining
San Diego: Sold Out ☠️
Tacoma: 25 seats remaining
Austin, Texas: 5 seats remaining 🔥
Montreal: 22 seats remaining
Orlando: 25 seats remaining
Córdoba: 10 seats remaining
Edinburgh: 6 seats remaining 🔥
Amsterdam: Sold out ☠️
Oslo, Norway: ??
Bonn, Germany: Sold out ☠️

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html
In-person tickets still available at some sites (1/4)

Tickets for #DEATHcon in Montreal are on sale now!

Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out!

eventbrite.ca/e/deathcon-m...

Additional info (like workshops) for the con can be found here : deathcon.io

Please like & repost for reach

We're down to just a few online tickets left (about 5)

Ticket sales for @deathcon.io 2025 have started! I'm hosting the Orlando location. I know you want to come hang out with us in the 3 dimensional world. Orlando site ticket includes lunch on both days and a dinner on Saturday. See you in DEATH! 💀
deathcon.io/tickets.html

#DEATHCon2025 tickets for Tacoma, Washington on-site are now available: www.eventbrite.com/e/deathcon-t...

Thanks to @infoblox.bsky.social for hosting the workshop meeting space during both days. We'll party on Saturday night at the Tacoma Art Museum with catered dinner and drinks (NA drinks too)

#DEATHCon2025 merch is now available! DEATHCon.io/merch.html
This year, 100% of the proceeds go directly to KC7 Cyber Foundation to provide cybersecurity education free to everyone! We 💜 u, KC7!

a woman in a red shirt is holding a microphone and says you get a ticket ALT: a woman in a red shirt is holding a microphone and says you get a ticket

This year, we're making online tickets affordable no matter what your geography, economy, or work situation with pay-what-you-can pricing. We want everyone to have access to great workshops and hands-on threat hunting training!

a neon sign that says tickets is lit up in red ALT: a neon sign that says tickets is lit up in red

DEATHCon online/remote ticket sale round 1 will start Monday 7th of July at 00:01 UTC! www.worldtimebuddy.com?pl=1&lid=100... Last year they sold out in 24h 😳

On-site tickets will be available on 7/7 at around 10am local time for each site.

All details here: deathcon.io/tickets.html

Tickets will go on sale July 7, and the conference will be held November 8-9. Last year the online tickets sold out on the first day, so we doubled the number available this year and split it into two rounds to give people a better chance

Hey #threathunting friends, we've got a great lineup of workshops coming up for #DEATHCon2025, including "CLI Got 99 Problems, but Obfuscation Aint't One" by @wietzebeukema.nl - learn to turn attackers tricks against them! 😈💀💥
Check them out at DEATHCon.io/workshops.html

a drawing of a skeleton hand reaching out towards another hand . ALT: a drawing of a skeleton hand reaching out towards another hand .

We've received so many excellent workshop CFP responses for DEATHCon 2025, and we'll be sending acceptance messages by tomorrow, June 1st! After workshop leaders confirm acceptance, we'll be listing the workshops on deathcon.io/workshops.html over the next few weeks. Thanks all!

Detection Engineering: DIY or Die Trying There’s a rising practice becoming the critical backbone of SecOps—and surprise, it’s not CNAPP. Sorry, unicorn Wiz.

🔥 New Dispatch 🔥
In our latest guest post, Alex Hurtado talks the 2025 State of Detection Engineering Report.
tl;dr: Off-the-shelf detections won't save you. Your environment deserves better.
dispatch.thorcollective.com/p/detection-...
#detectionengineering #threathunting #thrunting #THORcollective

a skeleton is standing in front of a window and giving the middle finger . Alt: Decoration only: a skeleton is standing in front of a window and playing an air guitar.

The DEATHCon 2025 Call for Workshops is now open!
If you have a great idea for teaching people how to do #detectionengineering or #threathunting or an adjacent skill through hands-on experience in our lab, we'd love to hear it! deathcon.io/cfp.html Submit before June 1

#ESETresearch has discovered a zero day exploit abusing #CVE-2025-24983 vulnerability in Windows Kernel to elevate privileges (#LPE). First seen in the wild in March 2023, the exploit was deployed through #PipeMagic backdoor on the compromised machines. 1/4

Locations:
Kuala Lumpur, Tacoma, San Diego, Austin, Orlando, Montreal, Córdoba Argentina, Edinburgh, Amsterdam, Oslo, and Bonn

Where will you go to find friends in DEATH?

This year, 100% of the proceeds from merch sales will go to support KC7 Foundation to help them bring more free training through games to people who want to learn cyber security skills!

a grim reaper standing in front of a full moon in a cemetery ALT: a grim reaper standing in front of a full moon in a cemetery

DEATHCon.io is updated with the 11 confirmed locations for in-person events, our dedication to making it affordable with pay-what-you-can pricing, why and how we're valuing diversity and representation, and more! Check it out!