Bridging CTI and Fraud – Understanding Social Media Cyber Threat Landscape and Beyond

SANS Cyber Threat Intelligence Summit 2025
But Mom, I Need To Spend More Time on Social Media! (Bridging CTI and Fraud – Understanding Social Media Cyber Threat Landscape and Beyond)
Daniel Widya Suryanata, Incident Response Senior Manager, GoTo Group
Jurgen Visser, Head of Cyber Defense and Enterprise Security, GoTo Group

We would like to highlight how a mature CTI program could be used to help the Risk and Fraud team, especially on the social media front. We will talk about how the social media threat landscape is impacting our millions of customers in Indonesia, coming from one of the biggest IT companies in the country. While the US has its fair share of fake call center problems, Indonesia has social media impersonation problems.

In the presentation, we are planning to talk about:
– Why our environment is unique (combination of a large IT company in Indonesia), which may be a good consideration for any company that is already in the region or wants to expand.
– How social media is used by customers.
– How CTI may help the social media impersonation challenges.
– What we observed happening on the social media front. This is going to be a real world study case on the cases happening over here. Such as: impersonating over popular messaging apps and social media platforms (WhatsApp, Instagram, and Twitter), social media comment hijacking, Google Maps fraud, fake job postings, etc.
– Some other contributing factors that we observed to be happening outside of social media in Indonesia, such as Infostealer problems, etc.
– Last but not least, our recommendation on how CTI can help, especially in terms of bridging CTI and Fraud function.

View upcoming Summits: http://www.sans.org/u/DuS

source