{"guid":"b9ca38ea-fa88-48c4-8083-9415eee93fcb","title":"Visiting The Bear Den","subtitle":"A Journey in the Land of (Cyber-)Espionage","slug":"33c3-8094-visiting_the_bear_den","link":"https://fahrplan.events.ccc.de/congress/2016/Fahrplan/events/8094.html","description":"Sednit, a.k.a Fancy Bear/APT28/Sofacy, is a group of attackers\noperating since at least 2004 and whose main objective is to steal\nconfidential information from specific targets. Over the past two years,\nthis group's activity increased significantly, in particular with numerous attacks against foreign affairs ministries and embassies all over the world. They are supposedly behind the DNC hack, and the WADA hack, which happened earlier this year. This talk presents the results of a two-year hunt after Sednit, during which we dug up and analyzed many of their software.\n\n","original_language":"eng","persons":["Jessy Campos"],"tags":["Security"],"view_count":2575,"promoted":false,"date":"2016-12-27T23:00:00.000+01:00","release_date":"2016-12-28T01:00:00.000+01:00","updated_at":"2025-04-17T00:00:03.273+02:00","length":3542,"duration":3542,"thumb_url":"https://static.media.ccc.de/media/congress/2016/8094-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2016/8094-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2016/b9ca38ea-fa88-48c4-8083-9415eee93fcb-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2016/b9ca38ea-fa88-48c4-8083-9415eee93fcb-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/33c3-8094-visiting_the_bear_den","url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_title":"33C3: works for me","conference_url":"https://api.media.ccc.de/public/conferences/33c3","related":[{"event_id":3597,"event_guid":"87092ad2-d3fd-4a37-bb58-1fe71217a06b","weight":30},{"event_id":3633,"event_guid":"530f0400-e4e8-4d99-909d-4cfc8121c0b0","weight":60},{"event_id":3634,"event_guid":"361946ca-4577-467d-b608-022c8a2d3164","weight":27},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":57},{"event_id":3642,"event_guid":"fd205d0d-d767-4ff6-9771-9f2d4c933fe7","weight":44},{"event_id":3643,"event_guid":"2689ebfe-0d84-4c88-9ea6-5cadad9d4fa4","weight":26},{"event_id":3646,"event_guid":"f32a1a13-b244-4a1d-a6cf-99c5e3bdad27","weight":33},{"event_id":3652,"event_guid":"60b52369-b0ee-455f-904a-4dfef49596eb","weight":26},{"event_id":3654,"event_guid":"ac80424a-f4dc-431d-95f3-3f85664ba2dc","weight":63},{"event_id":3662,"event_guid":"8c32309e-7136-4899-8ee4-1558e63ad137","weight":35},{"event_id":3667,"event_guid":"6347d122-daf0-4b30-851c-32cac06bf6bd","weight":56},{"event_id":3689,"event_guid":"1f7eb981-2819-4824-8f40-4ddde0be7bf3","weight":30},{"event_id":3695,"event_guid":"c300b194-2a85-4705-92aa-b4e789882303","weight":62},{"event_id":3766,"event_guid":"2b9b6095-9dcd-49f3-9792-cf74aab88b16","weight":31}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_33c3-8094-eng-deu-Visiting_The_Bear_Den.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T17:02:29.261+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/DRAFT_33c3-8094-eng-deu-Visiting_The_Bear_Den.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/48092","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":254,"length":3542,"mime_type":"video/mp4","language":"eng","filename":"33c3-8094-eng-Visiting_The_Bear_Den.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T13:37:17.046+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8094-eng-Visiting_The_Bear_Den.mp4","url":"https://api.media.ccc.de/public/recordings/13714","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":293,"length":3542,"mime_type":"video/mp4","language":"deu","filename":"33c3-8094-deu-Visiting_The_Bear_Den.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T13:37:54.686+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8094-deu-Visiting_The_Bear_Den.mp4","url":"https://api.media.ccc.de/public/recordings/13715","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":376,"length":3542,"mime_type":"video/mp4","language":"eng-deu","filename":"33c3-8094-eng-deu-Visiting_The_Bear_Den_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T13:38:47.496+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8094-eng-deu-Visiting_The_Bear_Den_hd.mp4","url":"https://api.media.ccc.de/public/recordings/13716","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":53,"length":3529,"mime_type":"audio/mpeg","language":"eng","filename":"33c3-8094-eng-Visiting_The_Bear_Den.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T15:46:13.117+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/mp3/33c3-8094-eng-Visiting_The_Bear_Den.mp3","url":"https://api.media.ccc.de/public/recordings/13812","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":45,"length":3529,"mime_type":"audio/opus","language":"eng","filename":"33c3-8094-eng-Visiting_The_Bear_Den.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T16:07:33.684+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/opus/33c3-8094-eng-Visiting_The_Bear_Den.opus","url":"https://api.media.ccc.de/public/recordings/13848","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":343,"length":3542,"mime_type":"video/webm","language":"eng-deu","filename":"33c3-8094-eng-deu-Visiting_The_Bear_Den_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T20:46:42.720+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-hd/33c3-8094-eng-deu-Visiting_The_Bear_Den_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/14007","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":149,"length":3542,"mime_type":"video/webm","language":"eng-deu","filename":"33c3-8094-eng-deu-Visiting_The_Bear_Den_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-28T20:47:11.717+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-sd/33c3-8094-eng-deu-Visiting_The_Bear_Den_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/14008","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":147,"length":3542,"mime_type":"video/mp4","language":"eng-deu","filename":"33c3-8094-eng-deu-Visiting_The_Bear_Den_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-30T10:16:40.339+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-sd/33c3-8094-eng-deu-Visiting_The_Bear_Den_sd.mp4","url":"https://api.media.ccc.de/public/recordings/14461","event_url":"https://api.media.ccc.de/public/events/b9ca38ea-fa88-48c4-8083-9415eee93fcb","conference_url":"https://api.media.ccc.de/public/conferences/33c3"}]}