Upcoming Webinars

Thursday, October 8, 2026 | 10:00 am CT

A phishing email disguised as a routine freight document was all it took. In this session, LevelBlue's Sean Shirley walks through the full CrySome RAT infection chain, from initial execution through privilege escalation and defense evasion, to inside the payload itself. Then he breaks down how the modular CrySome RAT provides the attacker with persistent remote access, facilitates post-exploitation activities, harvests user credentials, and enables continued C2 access over the compromised system. 

This is a hands-on technical session deconstructing how the LevelBlue MDR SOC team triaged and contained a structured infection chain.

Thursday, October 22, 2026 | 10:00 am CT

The ClearFake malware campaign hides its malicious payloads inside smart contracts on a public blockchain using the EtherHiding technique, making it nearly impossible to take down through conventional means. These attacks are actively infecting consumers and employees across a wide range of organizations and sectors, ultimately installing credential stealers that can lead to infiltration and major damage.

In this session, LevelBlue SpiderLabs turns the attacker’s own infrastructure against them, using that same on-chain data to identify real victims of an active campaign.