2026 AGENDA

CHECK IN

8:00 AM - 9:00 AM

9:00 AM - 9:05 AM

Welcome

Thomas Roccia

9:05 AM - 9:35 AM

Agentic AI as Financial Crime: How LLM-Powered Bots Are Redefining Automated Threats

Shashwat Jain

9:35 AM - 10:05 AM

From Deepfakes to Dog Scams: How Threat Actors Are Weaponizing AI for Fraud and Scams

Ingrid Dickinson & Sam Traynor

10:05 AM - 10:35 AM

Break

Signed, Sealed, and Weaponized: Disrupting a Malware‑Signing‑as‑a‑Service Operation

Maurice Mason & Nick Monaco

10:50 AM - 11:20 AM

Smish and Chips: A Crash Course in Chinese Smishing, Carding, and Fraud

Aurora Johnson & Kyla Cardona

11:20 AM - 11:50 AM

Lunch

Etherhiding: How Smart Contract Abuse is Redefining Malware

Pierce Vaughn

1:10 PM - 1:40 PM

1:40 PM - 2:10 PM

Riding the Rails: EvilTokens, Railway & the M365 Token Harvest

Casey Smith

2:10 PM - 2:40 PM

No Kit, No Kill Chain: Disrupting a Phishing Operation at the Backend

Carrie Jung

Snack Time

From Deployment to Dollars: Automating the PHaaS Pipeline

⚡️ 2:55 PM - 3:05 PM

⚡️ 3:05 PM - 3:15 PM

My FBI Profiler Called Me Sophisticated. What Else Did He Get Wrong?

Tim Pappa & Josh Brody

Off the Rails, On the Chain: Fingerprinting Ransomware's On-Chain Behavior

Seth DuBois

⚡️ 3:15 PM - 3:25 PM

Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits

Jiří Vinopal

⚡️ 3:25 PM - 3:35 PM

Grew up in The COM: Evolution and correlation of novel eCrime tradecraft from Scattered Lap$us ShinyHunters and friends

Sajal Thomas, Ryan Fyffe

3:35 PM - 4:05 PM

Angel(dust) in the Cloud: TeamPCP shows the vulnerability of CI/CD systems

Amitai Cohen, Ben Read

4:05 PM - 4:35 PM

Swipe Right, Pay Up: Industrial-Scale AI Catfishing

Chris Cronbaugh

4:25 PM - 4:55 PM

4:55 PM - 5:00 PM

Closing Remarks

5:30 PM - 6:30 PM

SLEUTHCON After Dark

Presented by Microsoft