Senior Security Researcher, Global Research & Analysis Team
David joined Kaspersky in 2010 as a senior security researcher for the Nordic region. From his base in Sweden, he is also responsible for technical PR activities for the same region and for North Europe, where he acts as a technical spokesperson. David has a passion for researching vulnerabilities and threats. His research often focuses on identifying vulnerabilities and threats in not only enterprise environments but also identifying social and psychological threats in, for example, social media. He also has a true passion for alternative operating systems such as UNIX, Linux, BSD, etc. Prior to joining Kaspersky, David worked in vulnerability research and vulnerability management. He was a senior security researcher, advisor and consultant at TrueSec AB. Before joining TrueSec AB in 2008, David worked for seven years at Outpost24, starting out as chief researcher and rising to vice president for customer experience by the time he left the company.Kaspersky analyzes SideWinder APT’s recent activity: new targets in the MiddleEast and Africa, post-exploitation tools and techniques.
Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries.
Kaspersky has identified a new EastWind campaign targeting Russian organizations and using CloudSorcerer as well as APT31 and APT27 tools.
The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity.