Abdelrahman Lotfy

Senior Manager – Intelligence Advisory Services

Recorded Future

Biography

Abdelrahman Lotfy is the senior manager of advisory services in the Middle East, Turkey, and Africa (META) region. He has over 12 years of experience in cybersecurity, with working experience in network security consultancy, SOC, and intelligence advisory. Over the last five years, Abdelrahman has worked with Recorded Future, starting as a consultant, and he is currently managing the META advisory team in Dubai. He has been helping hundreds of META clients improve their CTI maturity, building CTI programs, and implementing clients’ use cases using Recorded Future. Abdelrahman holds multiple vendor and cybersecurity certifications, including GIAC Cyber Threat Intelligence (GCTI), GIAC Reverse Engineering Malware (GREM), GIAC Certified Incident Handler (GCIH), CISSP, and CCIE Security.

Topic Name & Synopsis

Identity Theft to Intrusion: The Threat Actor’s Playbook

The agenda will go through a hands-on demo about the Stealer malware, one of the most trending initial access attack vectors used by various Nation-state actors, Ransomware families, and financially motivated actors. The demo will go through the stealer capabilities, channels that threat actors selling the sealer malware logs, how the actors can bypass two factors of authentication and mimic the victim to gain access, and finally, provide a demo using the Recorded Future Identity module on how to mitigate that risk and to be alerted once the victim credentials are exfiltrated.