{"id":11761,"date":"2026-03-25T13:51:36","date_gmt":"2026-03-25T13:51:36","guid":{"rendered":"https:\/\/events.aavar.org\/avar2025\/?page_id=11761"},"modified":"2026-03-25T13:51:36","modified_gmt":"2026-03-25T13:51:36","slug":"no-impregnable-fortress-how-team46-carries-out-successful-attacks-on-russian-companies","status":"publish","type":"page","link":"https:\/\/events.aavar.org\/avar2025\/index.php\/no-impregnable-fortress-how-team46-carries-out-successful-attacks-on-russian-companies\/","title":{"rendered":"No impregnable fortress: how Team46 carries out successful attacks on Russian companies"},"content":{"rendered":"\n[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column]\n\n\n\n
\n
\n
<\/div>\n\n\n\n

AGENDA<\/p>\n<\/div>\n\n\n\n

<\/div>\n<\/div>\n\n\n\n

[\/vc_column] [\/vc_row]<\/p>\n\n\n\n

<\/div>\n\n\n\n

<— Back<\/a><\/strong><\/p>\n\n\n\n

No impregnable fortress: how Team46 carries out successful attacks on Russian companies<\/p>\n\n\n\n

In my presentation, I will talk about how we discovered the advanced Team46 group, which carries out successful attacks on Russian companies. The group uses a wide range of techniques to gain initial access, from classic phishing to one-click exploit chains for Google Chrome (CVE-2025-2783). The group uses exploits not only to penetrate the network, but also to maintain persistence, for example, through the CVE-2024-6473 vulnerability for Yandex Browser. In addition to using well-known tools such as CobaltStrike and Donut, Team46 creates and actively develops its own tools, such as the Dante and Trinper backdoors, and also has an extensive\/complex of network infrastructure.<\/p>\n\n\n\n

<\/div>\n\n\n\n
\n
\n
\n
\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n

Vladislav Lunin – Positive Technologies<\/strong><\/strong><\/strong><\/p>\n\n\n\n

Vladislav Lunin, Senior Threat Intelligence Specialist of the Positive Technologies Expert Security Center Sophisticated Threat Research Group<\/p>\n\n\n\n

Previously, worked at Dr.Web as a virus analyst.
Speaker at relevant conferences – OFFZONE, PHDays.<\/p>\n\n\n\n

I am also a former \u201cCTF\u201d player, an active \u201cFlare-On\u201d player, and a contributor to “XAKEP” Journal.<\/p>\n<\/div>\n<\/div>\n\n\n\n

<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

[vc_row full_width=”stretch_row” el_class=”agenda-banner” el_id=”agenda_banner”] [vc_column] AGENDA [\/vc_column] [\/vc_row] <— Back No impregnable fortress: how Team46 carries out successful attacks on Russian companies In my presentation, I will talk about how we discovered the advanced Team46 group, which carries out successful attacks on Russian companies. The group uses a wide range of techniques to gain initial access, from classic phishing to<\/p>\n

<\/div>\n

Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-11761","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/comments?post=11761"}],"version-history":[{"count":1,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11761\/revisions"}],"predecessor-version":[{"id":11763,"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/pages\/11761\/revisions\/11763"}],"wp:attachment":[{"href":"https:\/\/events.aavar.org\/avar2025\/index.php\/wp-json\/wp\/v2\/media?parent=11761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}