2026-04-16 –, Amphitheater
Some malware samples open Spotify—mostly as a distraction and obfuscation technique.
In this lightning talk, I show in a high-level how I analyzed this behavior, share key findings, and present a small dashboard I built to explore the data:https://www.mboll.eu/spotify-malware-dashboard.html
The collected data is also shared as JSON for further analysis: https://www.mboll.eu/data/pocketbase_export.json
More details in the blog post: https://www.mboll.eu/posts/what_music_does_malware_listen_to/
Manuel is a security researcher driven by a passion to make threat actors’ lives harder. He works as a Cyber Security Analyst at dmTECH and also takes on freelance projects. When he’s off the clock, Manuel solves CTF challenges, writes blog posts for mboll.eu, and relaxes with a beer at the pub while philosophizing about the latest malware.