07-09, May 2025
Málaga, Spain

PIVOTconPIVOTcon is an invite-only event

Our goal is to create a forum to discuss the latest threats and to build connections between threat researchers.

Location

Malaga, Spain
PIVOTcon is an invite-only event that will be held in Malaga, Spain, on 07-09, May 2025 and focus on threat research and technical analysis tradecraft.
Get directions

Speakers

Visi Stark

Visi Stark

Founder of Vertex Project
Carel Bitter

Carel Bitter

Lead of Sigint Team at Spamhaus
Selena Larson

Selena Larson

Senior Threat Intelligence Analyst at Proofpoint
Konstantin Klinger

Konstantin Klinger

Senior Security Research Engineer at Proofpoint
Josh Hopkins

Josh Hopkins

Lead of Team Cymru S2 research team
Tom Hegel

Tom Hegel

Principal Threat Researcher at SentinelLabs
View all speakers

Agenda

09:00
Registration Opens at Higueron Hotel
13:30 - 17:00
Workshops
18:30
Infinity Pool Open doors, Higueron Hotel
19:00 - 22:30
WELCOME RECEPTION and POOLSIDE CHAT: Infinity Pool, Higueron Hotel

2025-05-08

Thursday
08:30 - 09:00
Registration, Welcome Coffee, Doors Open
09:00 - 09:15
PIVOTcon Opening Remarks
09:15 - 09:45
California Dreaming: Hunting and Disrupting a Sophisticated Fraud Actor
09:50 - 10:20
From Pyongyang with Code
10:20 - 10:50
Coffee Break
10:50 - 11:20
Trevor, did you forget the WHOIS Guard?
Bartosz RoszewskiBartosz Roszewski MAGIC MONEY COMPANY
11:25 - 11:55
On-Chaining Together Attribution: Using Blockchain Transaction Analysis to Inform the Threat Picture
Zach RiddleZach Riddle GOOGLE TI
12:00 - 12:45
Keynote
12:45 - 14:00
Lunch Break
14:00 - 14:30
Hello Zebrocy, my old friend
14:35 - 15:05
Cracking Attribution Research: The Rise of Collaborative Tactics Among Chinese Cyber Espionage Campaigns
Leon Chang TREND MICRO
15:05 - 15:35
Coffee Break
15:35 - 16:05
Manager W, and the PhD Robust Tech Wizards
Dan Kennedy GOOGLE TI
16:10 - 16:40
Unmasking the FreeDrain Network

2025-05-09

Friday
08:30 - 09:00
Welcome Coffee
09:00 - 09:30
Edge Devices Investigation
09:35 - 10:05
Redacted
10:10 - 10:40
PSNoWay: Disrupting the activities of an advanced PSOA
Joe HannonJoe HannonAdrien BatailleAdrien Bataille MICROSOFT (MSTIC)
10:40 - 11:10
Coffee Break
11:10 - 11:40
Redefining IABs: Impacts of Compartmentalization on Threat Tracking & Modeling
11:45 - 12:30
Discussion Panel
12:30 - 13:45
Lunch Break
13:45 - 14:15
You-Know-Who’s Cyber Crew: Attributing Widespread Voldemort Phishing Campaign to China-nexus TA415
Mark KellyMark Kelly PROOFPOINT
14:20 - 14:50
Silent Operators: Attribution Challenges and the Role of Private Contractors in China’s Mobile Surveillance Ecosystem
14:55 - 15:25
China's Subliminal Cyberspace
Bendik HagenBendik Hagen PWC GLOBAL THREAT INTELLIGENCE
15:25 - 15:55
Coffee Break
15:55 - 16:25
How to track the most profitable threat actor in the world, for free
Prashil PattniPrashil Pattni PALO ALTO NETWORKS
16:30 - 17:00
Melting Secret Blizzard through pivoting and advanced analysis techniques
17:00 - 17:15
Closing Remarks
About us
PIVOTcon is a non-profit event created by veteran threat intelligence practitioners Pasquale Stirparo and Bartosz Jerzman. With no corporate backing, all revenue goes directly into running the conference.
It’s built by threat analysts for threat analysts — a trusted space to share deeper insights, discuss emerging threats beyond public reports, and strengthen connections across the community.

FAQs

What is PIVOTcon?
When/Where is PIVOTcon?
How to get an invite to attend PIVOTcon?
Why do I need an invite instead of simply buying a ticket?
How to apply to present at PIVOTcon?
How long are the talks?
Are speakers costs covered?
Are second speaker costs covered?
What topics are in scope of PIVOTcon?
Can I sponsor PIVOTcon?
Will the talks be streamed or recorded?
How many tracks for speakers will be organised during PIVOTcon?