JSAC2026 -Workshop/Lightning Talk Session/Panel Discussion-

This JSAC2026 session report summarizes workshops and talks covering practical malware analysis and incident response techniques, active campaigns (e.g., HoldingHandsRAT phishing targeting Japanese organizations, GitHub-based malvertising distributing HijackLoader and AMOS Stealer), phishing kit activity, hosting/shared-mail risks, and tooling for phishing investigations. It highlights hands-on reverse-engineering of loaders and stealers, Native AOT .NET analysis techniques, and operational observations such as use of password-protected payloads, stolen code-signing certificates, and short-lived phone lines for fraud.