BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.botconf.org//botconf-2026//talk//Z7SRXM
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-botconf-2026-Z7SRXM@cfp.botconf.org
DTSTART;TZID=CET:20260416T171100
DTEND;TZID=CET:20260416T171400
DESCRIPTION:Threat intelligence sharing is one of the cornerstones of the s
 ecurity community. Disclosing findings publicly helps defenders act\, rais
 es collective awareness\, and advances the field. But sharing is not a cos
 t-free operation and this talk is about one case where the cost became vis
 ible in an unexpected way.\nIn early 2026\, Cleafy TIR published a full te
 chnical analysis of Mirax\, a novel Android RAT capable of turning infecte
 d devices into residential proxy nodes. The report included C2 indicators\
 , malware capabilities\, and delivery infrastructure details. One element 
 was deliberately withheld: the URL of an attacker-controlled GitHub reposi
 tory actively distributing new APK variants on a daily basis. The decision
  to blur it was intentional\, the repository represented a live intelligen
 ce source\, and burning it would mean losing visibility into an ongoing ca
 mpaign.\n\nThis talk presents that case as a concrete example of a recurri
 ng tension in threat intelligence sharing: the gap between the intent of a
  disclosure and the downstream actions it enables. We examine the decision
  to blur rather than redact\, the signal that blurring carries\, and what 
 it means when that signal is not recognised or respected.\n\nThe talk does
  not offer a verdict. It asks a question the community should be discussin
 g openly: how do we share intelligence without becoming collateral in our 
 own disclosures?
DTSTAMP:20260429T221833Z
LOCATION:Amphitheater
SUMMARY:LT18-The Cost Of Sharing - Alessandro Strino
URL:https://cfp.botconf.org/botconf-2026/talk/Z7SRXM/
END:VEVENT
END:VCALENDAR