2026-05-16 –, Track 1
A live demonstration of modern BEC attacks, MFA bypass, and how attackers monetise trust.
We’re going to log into someone else’s email account - and they’re going to help us do it! From phishing to MFA bypass to session hijacking, this session walks through a real-world BEC attack chain end-to-end.
Then we ruin the attacker’s day by showing exactly how to stop it.
Mike Varley is a DFIR analyst who professionally investigates cyber incidents and unprofessionally enjoys recreating them for educational purposes. With experience across SOC and incident response, he’s spent years tracking how attackers turn a single phish into a very bad day.
He specialises in translating chaos into something defenders can actually use - with minimal jargon and maximum “oh no.”