Publications
Research & Writing
Findings from day-to-day malware analysis, written up and published for the security community since 2015 — decoded infection chains, detection methodology, and emerging tactics. 25 pieces and counting.
2024
2022
2020
Sucuri Blog
Magento Credit Card Stealing Malware: gstaticapi
Skimmer found on roughly 22% of infected Magento checkout pages at the time.
Sucuri Blog
Malicious One-Liner Using Hastebin
Sucuri Blog
Persistent WordPress User Injection
Sucuri Blog
String Concatenation: Obfuscation Techniques
Sucuri Blog
Malicious Magento User Creator
Sucuri Blog
Phishing and Malware via SMS Text Message
2019
2018
2017
Impact
Cited in academic research
Referenced in “What Gets Measured Gets Managed: Mitigating Supply Chain Attacks with a Link Integrity Management System”, presented at the 2025 ACM SIGSAC Conference on Computer and Communications Security (CCS).
More
Full archive
Media
Speaking
Guest, Sucuri Sit-Down podcast, Episode 2 (2020)
Discussed malware taxonomy and detection methodology.