Publications
2022
- Threat Hunting as a Proactive Security Measure in the Energy Sector (Fishing the Internet)
- Threat-Hunting als proaktive Sicherheitsmaßnahme im Energiesektor (Tagesspiegel Background Cybersecurity)
- The Rise of LNK Files (T1547.009) and Ways To Detect Them (Fishing the Internet)
- Russia's War Against Ukraine: Effects on the Ukrainian LGBTQIA+ Community (with Insikt Group / Recorded Future)
- Trust is good, testing is better: How to pentest Flutter apps (with Daniel Corak / Fishing the Internet)
- Die zentralen Herausforderungen bei Cyberkriminalität (Tagesspiegel Background Cybersecurity)
- Germany, Industrial Sector Hit Hardest by Ransomware in 2020 and 2021 (with Allan Liska, Charlotte Edwards / Recorded Future)
- Ransomware Enforcement Operations in 2020 and 2021 (Recorded Future)
- Wiper Malware: Purposes, MITRE Techniques, and Attacker's Trade-Offs (Fishing the Internet)
- LOLBin Attacks With Scheduled Tasks (T1053.005) and How To Detect Them (Fishing the Internet)
- Zero-Day: Das lukrative Geschäft mit Sicherheitslücken (Tagesspiegel Background Cybersecurity)
- Vulnerabilities Disclosure mit chinesischer Prägung: Nutzen und Gefahren (with Nicolas Huppenbauer / inside-it.ch)
2021
- Chaining Three Zero-Day Exploits in ITSM Software ServiceTonic for Remote Code Execution (with Daniel Corak / Security Research Labs)
- Honeypot research shows variety of DDoS amplification methods (with Alberto del Rio / Security Research Labs)
- Achieving Telerik Remote Code Execution 100 Times Faster (with Daniel Corak / Security Research Labs)
- Incorrectly patched ZyXEL vulnerability becomes zero-day again (with Daniel Corak, Genco Altan Demir / Security Research Labs)