BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-tallinn-2026//talk//A79GBX
BEGIN:VTIMEZONE
TZID:Europe/Helsinki
BEGIN:DAYLIGHT
DTSTART:20250925T000000
TZNAME:EEST
TZOFFSETFROM:+0300
TZOFFSETTO:+0300
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T040000
RDATE:20261025T040000
TZNAME:EET
TZOFFSETFROM:+0300
TZOFFSETTO:+0200
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T040000
RDATE:20270328T040000
TZNAME:EEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0300
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Deconstructing Modern macOS Initial Access Vectors - Stephan Berge
 r
DTSTART;TZID=Europe/Helsinki:20260925T140000
DTEND;TZID=Europe/Helsinki:20260925T144500
DTSTAMP:20260926T112156Z
UID:pretalx-bsides-tallinn-2026-A79GBX@pretalx.com
DESCRIPTION:For years\, a persistent myth suggested that macOS was inheren
 tly immune to malware. Today\, threat actors are aggressively shattering t
 hat illusion by deploying sophisticated initial access chains tailored to 
 bypass macOS defenses. This talk provides a deep-dive analysis of how mode
 rn adversaries gain their first foothold on Apple hardware.\n\nWe will dis
 sect the entire initial access pipeline\, starting with Infection Vectors 
 like deceptive Google Ads\, malicious ClickFix campaigns\, and sophisticat
 ed malvertising that trick users into lowering their guard. From there\, w
 e explore the Execution Phase\, analyzing how attackers weaponize scriptin
 g languages\, including traditional Bash and Python\, as well as native Ap
 pleScript\, Compiled AppleScript\, Perl\, and JavaScript for Automation (J
 XA). Finally\, we will examine the delivery mechanisms\, contrasting the a
 buse of native Binaries (Mach-O\, Platypus-packaged apps\, and Electron fr
 ameworks) with the trojanization of Storage and Installer Formats (DMGs an
 d PKGs).\n\nAttendees will walk away with a technical understanding of con
 temporary macOS tradecraft\, real-world attacker methodologies\, and the i
 nsights needed to hunt for and defend against modern Mac-focused threats.
LOCATION:Stage B
URL:https://pretalx.com/bsides-tallinn-2026/talk/A79GBX/
END:VEVENT
END:VCALENDAR