2025-06-21 –, Track 3 (Moody Rm. 102)
W. Garrett Myler has successfully used the Flipper Zero to test the effectiveness of evil portal attacks. You'll be shocked by the demographics (and training!) of the unwitting test subjects he social engineered. Garrett will show you how he used the Flipper Zero and evil portals to conduct his research and what individuals and companies should do to avoid being victims in our modern world of infostealers and credential stuffing.
This presentation will introduce the Flipper Zero and evil portal attacks including a live demonstration. OSINT-collected demographic information of the nearly 50 people caught during the research provides insight into the age, occupations, and industry certificates (CEH, etc.) of those susceptible to this attack; the findings will surprise you! The experience and cybersecurity training of evil portal test subjects highlights that cyber awareness training is NOT a sufficient risk mitigation and should be accompanied by technical controls; namely, two-factor authentication.
W. Garrett Myler, the Owner of Enclave Defense and proud U.S. Air Force Reservist, has 14 years of experience supporting threat intelligence and cyber operations within the U.S. Department of Defense - from strategic to tactical levels of operation. He has traveled the world performing vulnerability assessments on industrial control systems (ICS) supporting critical infrastructure. Mr. Myler is an experienced and engaging cybersecurity instructor and presenter and has trained professionals and addressed audiences from around the world. He is a CISSP, GIAC Certified Forensic Analyst, an ISA 62443 certified "expert", and has a Masters of Science in Digital Forensics and Cyber Investigation. Most of all, Mr. Myler is honored to fill the roles of husband to his wife Julie and father to their five children.