Research connected to Dominican Republic

• August 8, 2026 Talk Malware & Reversing Malware Village — DEF CON 2026 Nelson Rafael Colón Merán DO Haetae: An Agent to Takedown North Korean C2 Servers

  In this talk, we introduce Haetae, an agent designed to profile, identify, and exploit C2 frameworks used by North Korean malware.

  Haetae supports both automated and interactive modes, allowing analysts to map and understand adversary infrastructure with different levels of control. It is built around a flexible rule-based system, enabling users to extend and refine detections as new patterns and frameworks emerge.

  In this first release, we will walk through real-world cases where Haetae was used to identify and take down infrastructure associated with Mach-O Man and POWerful Armadillo.

  We will also release a safe emulator of both malware C2 servers, allowing researchers and newcomers to experiment with Haetae in realistic, controlled environments without risk.

  This is a highly technical talk but can be enjoyed by both beginners and seasoned threat hunters alike.

  ResearchersNelson Rafael Colón Merán DO

  Presented at Malware Village — DEF CON 2026

  View official session
• August 7, 2026 Talk Malware & Reversing Adversary Village — DEF CON 2026 Mauro Eldritch AR·Nelson Rafael Colón Merán DO Haetae: An Agent to Takedown North Korean C2 Servers

  In this talk, we introduce Haetae, an agent designed to profile, identify, and exploit C2 frameworks used by North Korean malware.

  Haetae supports both automated and interactive modes, allowing analysts to map and understand adversary infrastructure with different levels of control. It is built around a flexible rule-based system, enabling users to extend and refine detections as new patterns and frameworks emerge.

  In this first release, we will walk through real-world cases where Haetae was used to identify and take down infrastructure associated with Mach-O Man and POWerful Armadillo.

  We will also release a safe emulator of both malware C2 servers, allowing researchers and newcomers to experiment with Haetae in realistic, controlled environments without risk.

  This is a highly technical talk but can be enjoyed by both beginners and seasoned threat hunters.

  ResearchersMauro Eldritch AR·Nelson Rafael Colón Merán DO

  Presented at Adversary Village — DEF CON 2026

  View official session
• August 7, 2026 Workshop Malware & Reversing Red Team Village — DEF CON 2026 Mauro Eldritch AR·Nelson Rafael Colón Merán DO Haetae: An Agent to Takedown North Korean C2 Servers

  In this talk, we introduce Haetae, an agent designed to profile, identify, and exploit C2 frameworks used by North Korean malware.

  Haetae supports both automated and interactive modes, allowing analysts to map and understand adversary infrastructure with different levels of control. It is built around a flexible rule-based system, enabling users to extend and refine detections as new patterns and frameworks emerge.

  In this first release, we will walk through real-world cases where Haetae was used to identify and take down infrastructure associated with Mach-O Man and POWerful Armadillo.

  We will also release a safe emulator of both malware C2 servers, allowing researchers and newcomers to experiment with Haetae in realistic, controlled environments without risk.

  This is a highly technical talk but can be enjoyed by both beginners and seasoned threat hunters.

  ResearchersMauro Eldritch AR·Nelson Rafael Colón Merán DO

  Presented at Red Team Village — DEF CON 2026

  View official session