BSidesSF 2026 - The Phaaaaaaaaantom of the Salt Typhoon is there, inside i-SOON (Daniel Schwalbe)

In this session, Daniel Schwalbe discusses the tactics, techniques, and procedures (TTPs) of the Chinese-sponsored APT known as Salt Typhoon, shedding light on how defenders can attribute and respond to its operations. The talk reveals valuable patterns identified through passive DNS that map the infrastructure of Salt Typhoon and related advanced persistent threats (APTs). This presentation offers insights into understanding and mitigating risks associated with these sophisticated cyber threat actors.