Cristian Souza

Incident Response Specialist, GERT

Cristian Souza is an Incident Response Specialist at Kaspersky’s Global Emergency Response Team (GERT). He holds a degree in Computer Networks and is currently pursuing a Ph.D. in Computer Science at the University of São Paulo (USP). Cristian’s primary responsibilities include conducting forensic analysis of critical incidents, identifying their root causes, and performing malware reverse engineering. An active contributor to the cyber security community, Cristian has published several research papers and holds certifications including CISSP, GCFA, GREM, and GXPN.

Publications

Reports

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

Mem3nt0 mori – The Hacking Team is back!

Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

Mysterious Elephant: a growing threat

Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.