{"id":11651,"date":"2026-03-25T12:27:10","date_gmt":"2026-03-25T12:27:10","guid":{"rendered":"https:\/\/events.aavar.org\/avar2025\/?page_id=11651"},"modified":"2026-03-25T12:44:49","modified_gmt":"2026-03-25T12:44:49","slug":"agenda","status":"publish","type":"page","link":"https:\/\/events.aavar.org\/avar2025\/index.php\/agenda\/","title":{"rendered":"Agenda"},"content":{"rendered":"\n
\n[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column]\n\n\n\n
\n
\n
<\/div>\n\n\n\n

AGENDA<\/p>\n<\/div>\n\n\n\n

<\/div>\n<\/div>\n\n\n\n[\/vc_column] [\/vc_row]\n<\/div><\/div>\n\n\n\n
<\/div>\n\n\n\n
3rd December, 2025, Wednesday<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
12:00 – 16:30<\/td>AVAR Help Desk<\/td><\/tr>
14:00 – 16:30<\/td>MARC I (Malware Analysis Report Competition)
Lena Yu, Malware Village<\/em><\/td><\/tr>
16:30 – 18:00<\/td>Registration<\/td><\/tr>
19:00<\/td>Welcome drinks reception and dinner<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
<\/div>\n\n\n\n
Conference Day 1:<\/strong> 4th December, 2025, Thursday<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
09:00 – 09:30<\/td>\nRegistration<\/td>\n<\/tr>\n
09:30 – 09:40<\/td>\nWelcome Address:<\/strong> Kesavardhanan J, CEO, AVAR
Conference Opening:<\/strong> Righard Zwienenberg, Chairman, AVAR<\/td>\n<\/tr>\n
09:40 – 10:00<\/td>\nKeynote Address:<\/strong>
Dato\u2019\u200b Dr Amirudin Abdul Wahab, CEO, Cyber Security Malaysia<\/i><\/td>\n<\/tr>\n
10:00 – 10:20<\/td>\nKeynote Address:<\/strong>
Tanvinder Singh, Director Cyber Security & Privacy, PWC<\/i><\/td>\n<\/tr>\n
10:20 – 10:40<\/td>\nKeynote Address:<\/strong>
Michael Daniel, President & CEO, Cyber Threat Alliance<\/i><\/td>\n<\/tr>\n
10:40 – 11:00<\/td>\nBreak<\/td>\n<\/tr>\n
Track 1<\/td>\n<\/td>\nTrack 2<\/td>\n<\/td>\nCISO Workshop<\/td>\n<\/tr>\n
11:00 – 11:30<\/td>\nSniffing Around: Unmasking the LongNosedGoblin operation in Southeast Asia and Japan<\/a>
Anton Cherepanov, Peter Str\u00fd\u010dek, ESET<\/i><\/td>\n		<\/td>\n11:00 – 11:30<\/td>\nHigh Stakes, Hidden Threats: Unmasking the Vault Viper Network with DNS<\/a>
Ma\u00ebl Le Touz, John Wojcik, Infoblox<\/i><\/td>\n		<\/td>\n11:00 – 11:05<\/td>\nIntroduction to CISO workshop<\/strong>
Dr. Peter Leong<\/td>\n<\/tr>\n
<\/td>\n11:05 – 11:25<\/td>\nQuantum Reckoning: Cyber Security At A Tipping Point<\/a>
Felissa Mariz Marasigan, Mark Gabriel Rizare, EY GDS (CS) Philippines, Inc.<\/i><\/td>\n<\/tr>\n
11:30 – 12:00<\/td>\nInside the Shadows: APT Tactics Using MSC Files, Grim Resource Injection, and AppDomain Hijacking<\/a>
Hossein Jazi, Douglas Santos, Fortinet<\/i><\/td>\n		<\/td>\n11:30 – 12:00<\/td>\nLotus in Perpetual Bloom: Sustained Espionage in Southeast Asia with Evolving Sagerunex Backdoors<\/a>
Joey Chen, Cisco<\/i><\/td>\n		<\/td>\n11:25 – 11:45<\/td>\nCountering the Unthinkable: Disrupting Advanced Threats with Unconventional Defenses<\/a>
Ken Soh, Athena Dynamics<\/i><\/td>\n<\/tr>\n
12:00 – 12:30<\/td>\nShadows in Native Code: The Rise of AOT Compilation in Modern .NET Malware<\/a>
Sarang Popat Sonawane, Crowdstrike<\/i><\/td>\n		<\/td>\n12:00 – 12:30<\/td>\nNTLM Exploit Redux!<\/a>
Anurag Shandilya, Arnab Mandal, Satyam Yadav, K7 Computing<\/i><\/td>\n		<\/td>\n11:45 – 12:25<\/td>\nLeading with Risk – How CISOs Can Drive Business Decisions (Panel Discussion)<\/strong>
Ridzwan Mahdi, Maxis<\/i>Dr. Peter Leong, MY CIO Service<\/i>
Vikneswaran Kunasegaran, CREST<\/i>
Arivindran Saidoo, KPMG Malaysia<\/i>
Malini Kanesamoorthy, AmBank Group<\/i>
Dharshan Shanthamurthy, SISA<\/i><\/td>\n<\/tr>\n
12:30 – 13:00<\/td>\nNo Payload For You: Inside Sidewinder\u2019s Selective Exploitation Strategy<\/a>
Eliad Kimhy, Santiago Pontiroli, Acronis<\/i><\/td>\n		<\/td>\n12:30 – 13:00<\/td>\nSESE: Social Engineering Second Edition<\/a>
Righard Zwienenberg, Eddy Willems, ESET, WAVCi<\/i><\/td>\n		<\/td>\n12:25 – 13:00<\/td>\nTraining session: Building a Secure Malware Analysis Environment<\/strong>
Lena Yu, Malware Village<\/i><\/td>\n<\/tr>\n
13:00 – 14:00<\/td>\nLunch<\/td>\n<\/tr>\n
14:00 – 14:30<\/td>\nConnectUnwise: How Threat Actors Abuse ConnectWise Installer as Builder for Signed Malware<\/a>
Lance Jansen Caoile Go, Karsten Hahn, G Data AV Lab Inc \/ G Data Cyberdefense AG<\/i><\/td>\n		<\/td>\n14:00 – 14:30<\/td>\nValleyRAT Unleashed: A Deep Dive into its Modern Arsenal and Tactics<\/a>
Hiromu Kubiura, Shota Nakajima, Ryonosuke Kawakami, LY Corporation \/ Cyber Defense Institute, Inc.<\/i><\/td>\n		<\/td>\n14:00 – 14:40<\/td>\nDisaster Recovery – What Works, and Doesn\u2019t, in the Real World (Panel Discussion)<\/strong>
Wisnu Tejasukmana, SLB<\/i>Ridzwan Mahdi, Maxis<\/i>
Ashok Kumar J, G3 Cyberspace<\/i>
Shah Mijanur Rahman, Inmagine Group<\/i>
Dinesh Barathy, Collectius Group<\/i><\/td>\n<\/tr>\n
14:30 – 15:00<\/td>\nYet Another Cyberespionage Operation In Vietnam<\/a>
Tran Duy Nam, Dat Nguyen The,VNPT Cyber Immunity<\/i><\/td>\n		<\/td>\n14:30 – 15:00<\/td>\nModern Fileless RAT Tactics: Node.js Abuse : Technical Analysis and Threat Attribution<\/a>
Reegun Richard Jayapaul <\/i><\/td>\n		<\/td>\n14:40 – 15:20<\/td>\nCompliance & AI – Governing the New Technology On The Block (Panel Discussion)<\/strong>
Vikneswaran Kunasegaran, CREST<\/i>
Syarifah Bahiyah Rahayu, Universiti Pertahanan Nasional Malaysia<\/i>
Ruban Bala, Banking Industry<\/i>
Cameron Camp, SecureIQLabs<\/i>
Yusfarizal Yusoff, PETRONAS Digital<\/i><\/td>\n<\/tr>\n
15:00 – 15:30<\/td>\nAn Analysis of Cloud Infrastructure Utilization in Malware Command and Control<\/a>
Tran Thi Hieu Ngan, Bui Huy Anh, CMC Cyber Security<\/i><\/td>\n		<\/td>\n15:00 – 15:30<\/td>\nGenerative AI, Retrieval-Augmented Generation (RAG) and Agentic AI in Offensive Cyber Operations<\/a>
Aaron Aubrey Ng, Stanford University<\/i><\/td>\n<\/tr>\n
15:30 – 15:50<\/td>\nBreak<\/td>\n<\/tr>\n
15:50 – 16:10<\/td>\nThe Silent Invaders: Understanding and Combating macOS Infostealers<\/a>
Srinivasan Govindarajan, Pranjal Gupta, Microsoft<\/i><\/td>\n		<\/td>\n15:50 – 16:50<\/td>\nShared Vision: Advancing Cybersecurity Through Collective Innovation (Panel Discussion)<\/strong>
Vanja Svajcer, Cisco<\/i>
Erik Heyland, AV-Test<\/i>
Xavier P. Capilitan Jr., G Data AV Lab Inc<\/i>
Santeri Kangas, F-Secure<\/i>
James Thang, Help Group<\/i>
Ken Soh, Athena Dynamics<\/i>
Jacky AW, Kenanga Group<\/i><\/td>\n		<\/td>\n15:50 – 16:50<\/td>\nTraining session: AI Management Systems for CISOs – Navigating Governance, Risk, and Compliance<\/strong>
S Kumar Subramania, K7 Cyber Security<\/i><\/td>\n<\/tr>\n
16:10 – 16:30<\/td>\nUsing Linguistics and Psychological Profiling in Threat Actor Attribution<\/a>
Rishika Desai, BforeAI<\/i><\/td>\n<\/tr>\n
16:30 – 16:50<\/td>\nBooking a Threat: Inside LummaStealer\u2019s Fake reCAPTCHA<\/a>
Arvin Lauren L. Tan, John Rey B. Dador, Arvin Jay S. Bandong, G DATA AV Lab Inc.<\/i><\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n16:50 – 17:10<\/td>\nBeyond Pen Tests & Red Teams: A New Approach to Measuring Enterprise Cybersecurity Effectiveness<\/a>
Bijay Limbu Senihang, SecureIQLab<\/i><\/td>\n\n		<\/td>\n16:50 – 16:55<\/td>\nClosing remarks<\/strong>
Dr. Peter Leong<\/td>\n<\/tr>\n
19:00 – 19:30<\/td>\nPre-dinner Drinks<\/td>\n<\/tr>\n
19:30 – 22:00<\/td>\nGala Dinner<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Conference Day 2:<\/strong> 5th December, 2025, Friday<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
10:00 – 10:20<\/td>\nThe (Un)Natural Science of Malware<\/a>
Lena Yu, Malmons World Ltd & World Cyber Health – Malware Village<\/i><\/td>\n<\/tr>\n
Track 1<\/td>\n<\/td>\nTrack 2<\/td>\n<\/tr>\n
10:20 – 10:50<\/td>\nUnmasking AI-Themed Malvertising Targeting Social Media Users<\/a>
Jarom\u00edr Ho\u0159ej\u0161\u00ed, Check Point<\/i><\/td>\n		<\/td>\n10:20 – 10:50<\/td>\nSimplicity as a Weapon for Stealth and Persistence<\/a>
Chetan Raghuprasad, Cisco<\/i><\/td>\n<\/tr>\n
10:50 – 11:20<\/td>\nAI Voice Honeypots – Turning Scam Calls into Real-Time Threat Intelligence<\/a>
Claudiu Laurentiu Tirisi, Alexandru Paul Marinescu, Bitdefender<\/i><\/td>\n		<\/td>\n10:50 – 11:20<\/td>\nGhost Math: Syscall\u2011Only Injection, Deterministic Shellcode & QUIC C2 – A Modern EDR Bypass Monograph<\/a>
Ananda Krishna, Anand Sreekumar, UST<\/i><\/td>\n<\/tr>\n
11:20 – 11:40<\/td>\nBreak<\/td>\n<\/tr>\n
11:40 – 12:10<\/td>\nIDFKA Backdoor: The Hidden Threat of Rust Implants in Modern APT Campaigns<\/a>
Vladimir Stepanov, Anna Mazurkiewicz, Rostelecom-Solar<\/i><\/td>\n		<\/td>\n11:40 – 12:20<\/td>\nTransparency Wars: Exposing Hidden Biases in Testing (Panel Discussion)<\/a>
Luis Corrons, Gen<\/i>
Simon Edwards, SE Labs<\/i>
Righard Zwienenberg, ESET<\/i>
Samir Mody, K7 Computing<\/i><\/td>\n<\/tr>\n
12:10 – 12:40<\/td>\nThe Open doorX : From Directory Listing to Attribution<\/a>
Shogo Hayashi, Nobuyuki Amakasu, NTT Security Holdings<\/i><\/td>\n		<\/td>\n12:20 – 12:50<\/td>\nNo Impregnable Fortress: How Team46 Carries Out Successful Attacks on Russian Companies<\/a>
Vladislav Lunin, Positive Technologies<\/i><\/td>\n<\/tr>\n
12:40 – 13:10<\/td>\nMeet VenomSEO: New Threat Targeting Malaysian Websites for Black SEO<\/a>
Igor Zdobnov, Ivan Korolev, Doctor Web<\/i><\/td>\n		<\/td>\n12:50 – 13:10<\/td>\nHidden Malice: Inside Tiny FUD\u2019s Mac Backdoor<\/a>
Suresh Reddy Lomada, K7 Computing<\/i><\/td>\n<\/tr>\n
13:10 – 14:10<\/td>\nLunch<\/td>\n<\/tr>\n
14:10 – 14:40<\/td>\nFrom Code to Clues: Leveraging LLMs to RAT out Android SpyMax<\/a>
Baran Kumar, K7 Computing<\/i><\/td>\n		<\/td>\n14:10 – 14:40<\/td>\nCracking the Vault: Real-World Crypto Wallet Exploits and Defense Strategies<\/a>
Rijul Chauhan, Mansi Aggarwal, Mastercard<\/i><\/td>\n<\/tr>\n
14:40 – 15:10<\/td>\nWhen Firewalls Go Blind: Custom Tools, AI Agents, and the Fall of Traditional Network Inspection<\/a>
Sangay Lama, Cameron Camp, SecureIQLab<\/i><\/td>\n		<\/td>\n14:40 – 15:10<\/td>\nLeveraging Generative AI for dynamic file honeypots in Windows Kernel<\/a>
Vladimir Strogov, Sergey Ulasen, Acronis<\/i><\/td>\n<\/tr>\n
15:10 – 15:30<\/td>\nWindows threats and COM interfaces (Sponsor Presentation)<\/a>
Vanja Svajcer, Cisco<\/i><\/td>\n		<\/td>\n15:10 – 15:30<\/td>\nTracing the Origin: Fingerprints in MSC File for Clustering and Attribution<\/a>
Kazuya Nomura, Rintaro Koike, NTT Security Holdings<\/i><\/td>\n<\/tr>\n
15:30 – 15:50<\/td>\nBreak<\/td>\n<\/tr>\n
15:50 – 16:20<\/td>\nEmmenhtal Loader: The Silent Enabler of Modern Malware Campaigns<\/a>
Lovely Jovellee Lyn Antonio, Ricardo Pineda Jr, Louis Victor Sorita Jr, G Data AV Lab Inc<\/i><\/td>\n		<\/td>\n15:50 – 16:30<\/td>\nData Without Borders? Sovereignty, Trust, and the Cloud Dilemma (Panel Discussion)<\/strong>
Michael Daniel, Cyber Threat Alliance<\/i>
Selvakumar Manickam, Universiti Sains Malaysia<\/i>
Murugason R. Thangaratnam, Novem CS<\/i>
Syahril Aziz, Secure InSight Sdn Bhd<\/i>
Vimalaasree Anandhan, Poshmark<\/i><\/td>\n<\/tr>\n
16:20 – 17:00<\/td>\nInternal Threats – Strategies for Partner-Dependent Organizations (Panel Discussion)<\/strong>
Peter Stelzhammer, AV-Comparatives<\/i>
Jairam Ramesh, AIA Digital+<\/i>
Tanvinder Singh, PwC<\/i>
Jonathan Tam, Schneider Electric<\/i>
Ekneswaran Matandor<\/td>\n		<\/td>\n16:30 – 17:00<\/td>\nOperation DRAGONCLONE: Chinese Telecommunication industry targeted via VELETRIX & VShell malware<\/a>
Sathwik Ram Prakki, Subhajeet Singha, Quick Heal<\/i><\/td>\n<\/tr>\n
17:00 – 17:10<\/td>\nClosing address<\/td>\n<\/tr>\n
17:10 – 17:55<\/td>\nEGM and Member’s meeting<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n
6th December, 2025, Saturday<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n\n
8:30 \u2013 19:00<\/td>\nMalaysia Tour<\/td>\n<\/tr>\n
Click here for more details.<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Poster Presentation<\/strong><\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
A Threat-Aware Hybrid Quantum-Classical Machine Learning Framework for Network Intrusion Detection<\/strong>
Dr. Kalpana B N, Dr. Karthi M, St. Joseph\u2019s Group of Institutions<\/em><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
<\/div>\n\n\n\n
Reserve Papers<\/strong><\/strong><\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
Unveiling Swan Vector APT Targeting Taiwan and Japan with varied DLL Implants<\/strong>
Sathwik Ram Prakki, Subhajeet Singha, Quick Heal<\/em><\/td><\/tr>
The MITRE of GenAI’s ATT&CK<\/strong>
Samir Mody, K7 Computing<\/em><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
<\/div>\n","protected":false},"excerpt":{"rendered":"

[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column] AGENDA [\/vc_column] [\/vc_row] 3rd December, 2025, Wednesday 12:00 – 16:30 AVAR Help Desk 14:00 – 16:30 MARC I (Malware Analysis Report Competition)Lena Yu, Malware Village 16:30 – 18:00 Registration 19:00 Welcome drinks reception and dinner Conference Day 1: 4th December, 2025, Thursday 09:00 – 09:30 Registration 09:30 – 09:40 Welcome Address: Kesavardhanan J, CEO, AVARConference Opening:<\/p>\n

<\/div>\n

Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-11651","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/comments?post=11651"}],"version-history":[{"count":2,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11651\/revisions"}],"predecessor-version":[{"id":11653,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11651\/revisions\/11653"}],"wp:attachment":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/media?parent=11651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}