CARO Workshop 2026 Innsbruck, Austria
Cybercrime Without Borders: Tracking the Global Underground
AV-Comparatives Cybersecurity Summit: February 24 – 25, 2026
CARO Workshop: February 25 – 27, 2026
Day(s)
:
Hour(s)
:
Minute(s)
:
Second(s)
About the Event
Cybercrime Without Borders: Tracking the Global Underground
Dates: February 25 – 27, 2026
Location: Innsbruck, Austria
Join the global community of cybersecurity researchers for an immersive, expert-driven workshop addressing the increasingly transnational nature of cybercrime. Held immediately after the AV-Comparatives Cybersecurity Summit, CARO Workshop 2026 explores how threat actors operate across jurisdictions and platforms, and how defenders can track, understand, and counter them.
This year, we’re gathering at the heart of the Alps for three days of networking, knowledge sharing, and collaboration. Expect leading-edge presentations, vibrant discussions, and a musical aftershow celebration.
Program Overview
Drinks Reception at Seegrube – 2,200m Above Sea Level
Join for a truly extraordinary evening above the clouds! At 2,200 meters, the Seegrube sets the stage for the highest drinks reception ever held during a CARO Workshop. Take in the stunning panoramic views of the surrounding Alps, enjoy curated drinks and regional delicacies, and connect with fellow attendees in an unforgettable mountain setting. This is more than just a reception — it’s a moment to remember.
-
Meeting Point 1: 17:35 – Lobby Hotel Grauer Bär
-
Meeting Point 2: 17:50 – Cable Car Station
-
Cable Car leaves at 18.00, 18.15 and 18.30, don’t be late!
-
Wed, Feb 25, 2026
17:50
Cable Car Station
Presentations & Lunch
- 08:00 – 09:00 Registration
- 09:00 Opening remarks – Righard Zwienenberg
- 09:05 Welcome by AV-Comparatives
- 09:10 KEYNOTE Looking back on 40 years of anti virus experience, Christoph Fischer, BFK
-
10:00 How macOS Malware Outsmarts Apple’s Security, Andrei Lapusneanu, Bitdefender
-
10:30 BREAK
-
10:55 Unmasking AI-Themed Malvertising Targeting Social Media Users, Jaromír Hořejší, Check Point
-
11:40 APT’s playing with Roblox and Minecraft (amongst other sector specific platforms), Godert Jan van Manen, Lucas Onderwijs
-
12:05 No Payload For You: Inside Sidewinder’s Selective Exploitation Strategy, Eliad Kimhy, Acronis
-
12:30 LUNCH
-
13:30 Threats and COM interfaces, Vanja Svajcer, Cisco Talos
-
14:15 The Rise of the AI-Orchestrator: New Modus Operandi of Cyber Adversaries, Amit Weigman, Check Point Software
-
15:00 BREAK
-
15:25 Decrypting AI-Powered™ and Recycled Ransomware – Facepalms Included, Ladislav Zezula, Samuel Vojtáš, GEN Digital
-
16:10 The Hunter Becomes the Hunted, Gabor Szappanos, Sophos
-
16:55 Closing remarks – Tommi Uhlemann, AV-Comparatives
-
17:00 END
Thur, Feb 26, 2026
09:00 – 17:00
Evening Party at Jimmy’s – Live Music & Play-Along Jam Session
Bring Your Groove – Instruments Welcome (or Use Ours!)
Join us at Jimmy’s for a lively night of music, food, drinks, and spontaneous jam sessions! Enjoy live performances and an open stage where you can play along — whether you bring your own instrument or borrow one from the house band’s collection. From guitars and keyboards to percussion and more, everything you need is ready and waiting. Great tunes, tasty bites, and good vibes guaranteed. Let’s make some noise and memories together — CARO style!
19:00 – open end
Presentations & Lunch
- 09:30 Registration
- 10:00 WELCOME – Righard Zwienenberg
- 10:05 KEYNOTE – Cybercrime on the ground: Observations of experiences from the digital frontlines, Marijn Schuurbiers, EUROPOL
- 10:50 The dark prescription: inside the infrastructure of illegal online pharmacies, Lubos Bever, Gen Digital
- 11:15 BREAK
- 11:40 Evasion by Design: How APT Operations Slip Past Defenses, Marius Baciu, Bitdefender
- 12:05 LLMpot: Exploring the Open Frontier – A Study of Local AI Accessibility and Potential for Misuse, Marco Preuß, Costin Raiu, Independent Researchers
- 12:30 LUNCH
- 13:30 DeceptiveDevelopment and North Korean IT workers: from primitive crypto theft to sophisticated AI-based deception, Matej Havranek, SentinelOne, Peter Kalnai, ESET
- 14:15 Attic Shinobi: Persistent Listening for Adversary Fingerprints, Rintaro Koike, Masaya Motoda, NTT Security Holdings
- 15:00 BREAK
- 15:25 Cyber Kill Chain 2026. The good, the bad and the worst, Josep Albors, Ontinet
- 16:10 TBA
- 16:55 Closing remarks – Righard Zwienenberg
- 17:00 Closing thanks by AV-Comparatives
- 17:05 END
Fri, Feb 27, 2026
10:00 – 17:00
Registration
Fee: €950 (no early bird rate available)
Registration closes on 15 Dec 2025
Check our Sponsorship packages for complimentary passes
Admission: Participants will be admitted based on committee approval
Capacity: Limited to 120 participants
- Cancellations before 15 Nov. 2025: Full refund
- Cancellations between 15 Nov. and 30 Dec. 2025: 50% refund
- Cancellations after 30 Dec. 2025: No refund
Can I transfer my registration to a colleague?
Yes, CARO passes are fully transferable within the same organisation (provided committee approval), please email us with the new attendee’s information.
Can you provide me with a visa invitation letter?
Yes, please tick the checkbox during registration or reach out by email requesting a visa letter template for you to complete. Click here to see if you need a visa.
Venue
AV-C Cybersecurity Summit and CARO Workshop 2026 will take place at one of two premium venues in central Innsbruck:
- Management Center Innsbruck, Universitätsstraße 15
- Chamber of Commerce (Wirtschaftskammer Tirol), Wilhelm-Greil-Straße
Exact location will be confirmed closer to the event. Both venues offer modern facilities, excellent transport links, and stunning views of the Alpine surroundings.
Travel Advice
Innsbruck is well-connected via air, rail, and road. We recommend visiting our AV-Comparatives travel information page for detailed travel tips. LINK
Hotel Recommendations
We have reserved rooms in several hotels, all of which are centrally located, offer conference-friendly amenities, and are within walking distance of the venues. We recommend the GrauerBär and the Schwarzer Adler.
Book your hotel here: BOOKING LINK
Chatham House Rule
CARO Workshop 2026 will be held strictly under the Chatham House Rule:
Participants are free to use the information received for their own research, but neither the identity nor the affiliation of the speaker(s), nor that of any other participant, may be revealed.
Additional Policies:
- Keep the information confidential
- No photography or video recording permitted, no note taking
- Media and press are not allowed
- Analysts may attend only with a signed non-disclosure agreement (NDA)
These measures are in place to ensure candid discussions and the security of sensitive information.
Call for Papers Closed
Theme: Cybercrime Without Borders – Tracking the Global Underground
The deadline for paper submissions (17 October 2025) has passed.
Sponsoring
Support innovation and visibility — become a sponsor today and showcase your brand to a global tech-savvy audience.
AV-C Summit & Award Ceremony
Speed Meets Security: Racing Ahead in Threat Defense
Dates: 24 – 25 February, 2026
Location: Innsbruck, Austria
CARO Workshop 2026
Cybercrime Without Borders: Tracking the Global Underground
Dates: 25 – 27 February, 2026
Location: Innsbruck, Austria
Contact
contact@av-comparatives.org
6020 Innsbruck, Austria





