BEGIN:VCALENDAR
PRODID;X-RICAL-TZSOURCE=TZINFO:-//com.denhaven2/NONSGML ri_cal gem//EN
CALSCALE:GREGORIAN
VERSION:2.0
BEGIN:VTIMEZONE
TZID;X-RICAL-TZSOURCE=TZINFO:America/New_York
BEGIN:DAYLIGHT
DTSTART:20150308T020000
RDATE:20150308T020000
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
DTEND;TZID=America/New_York;VALUE=DATE-TIME:20150619T110000
DTSTART;TZID=America/New_York;VALUE=DATE-TIME:20150619T100000
DTSTAMP;VALUE=DATE-TIME:20150530T224049Z
UID:0edd01a3-982c-41c1-9842-a8b2d2bb04e4@localhost
DESCRIPTION:For some months now\, there were rumors of cartoon-named malw
 are employed in espionage operations. It actually started in March 2014 
 with a set of slides leaked from the Communications Security Establishme
 nt Canada (CSEC) -- Canada equivalent of NSA. CSEC then described to its
  spook friends a malware dubbed Babar by its authors\, which they attrib
 uted "with moderate certainty" to a French intelligence agency.\n\nThe g
 roup behind Babar is now commonly referred as "AnimalFarm" in antimalwar
 e industry\, because Babar was only a small piece of a much bigger puzzl
 e.\n\nSince CSEC slides' publication\, a group of valorous adventurers\,
  animated by the thrill of understanding complex malware operations\, ha
 s\nbeen relentlessly following AnimalFarm's trail. Along its path\, this
  group found several pieces of AnimalFarm's arsenal\, for example stealt
 hy\nCasper\, exotic Bunny and even big ears Babar itself.\n\nThis presen
 tation aims at presenting the results of this group's research. In parti
 cular\, we will provide a global picture on AnimalFarm's operations\, an
 d also delve into technical quirks of their malware. We will also explai
 n how we assessed the connection between their various piece of software
  from a code reverse-engineering perspective\, and what are the technica
 l hints we found regarding\nattribution.
URL:https://recon.cx/2015/schedule/events/35.html
SUMMARY:Totally Spies!
ORGANIZER:recon2015
LOCATION:Grand Salon
END:VEVENT
END:VCALENDAR