# The strange case of malicious favicons — Nestor Angulo de Ugarte

> A forensic walk-through of how a favicon can turn a site into a zombie botnet node.

Canonical: https://nestorangulo.pro/speaking/geneva-2022-malicious-favicons/

- Format: Conference Talk
- Event: WordCamp Geneva 2022
- Location: Geneva, Switzerland
- Date: 2022-04-08 (April 8, 2022)
- Language: English
- Speaker: [Nestor Angulo de Ugarte](https://nestorangulo.pro/about/)
- Themes: Malware, Web Security, WordPress Security
- Video: [Watch video](https://wordpress.tv/2022/05/25/nestor-angulo-de-ugarte-the-strange-case-of-malicious-favicons/)
- Slides: [View slides (PDF)](https://assets.nestorangulo.pro/slides/geneva-2022-malicious-favicons-526e4074e8.pdf)
- Slides on the event site: [Event-hosted slides](https://geneve.wordcamp.org/2022/files/2022/04/wordcamp-geneve-2022-nestor-angulo-de-ugarte-slides.pdf)

Look over the shoulder of a security analyst as a routine-looking favicon turns out to be the thread that unravels a full compromise — and shows how an innocent icon can turn a site into a zombie botnet node.

[← All talks](https://nestorangulo.pro/speaking/)