From Doxing to Doorstep:
|
Abstract
Doxing, initially a practice for undermining hackers’ online anonymity by “dropping docs”, has evolved into a tool used for real-world extortion, employing violence-as-a-service tactics like “brickings”, “firebombings” and “shootings”. This escalation reflects a troubling trend where digital conflicts manifest physically and is facilitated by legal grey areas. The ambiguous stance on doxing in itpolicy complicates accountability, making it a pressing concern for privacy and personal safety. This talk features first-hand insights from individuals engaged in doxing. This includes a wanted threat actor involved in a DEA Data Portal hack, and an administrator of the largest doxing website, Doxbin. This provides a rare glimpse into the secretive world of doxing, and lesser-known privacy intrusion techniques, such as impersonating law enforcement and submitting fraudulent Emergency Data Requests. The session concludes with actionable advice on safeguarding personal privacy to reduce the risk and impact of doxing. Attendees will leave equipped with knowledge of preventative measures. Speaker Bio: Jacob Larsen is an offensive security team lead at distinguished Australian cyber security consulting firm CyberCX. He is also a threat researcher who has specialized in infiltrating underground cybercrime groups to gain insights into their tradecraft and motives since 2016. He has analysed the modus operandi of doxxers, sim swappers, crypto drainers, fraud groups, espionage specialists, exploit developers, initial access brokers and more. Jacob is also a seasoned speaker, who has shared his research at Black Hat USA 2024. |