Dmitry Galov
Head of Global Research & Analysis Team (GReAT) Russia and CIS Unit
Dmitry Galov serves as the Head of Kaspersky's Global Research & Analysis Team (GReAT) Russia and CIS Unit. In this influential role, he leads the team of experts in charge of researching the most sophisticated cases related to APTs and financially motivated attacks. Dmitry embarked on his journey with Kaspersky in September 2015 as an intern and later joined GReAT in August 2018, gradually progressing to become Senior Security Researcher. Before assuming his current position, he spearheaded the crimeware research group, showcasing his leadership capabilities. Dmitry is an expert with a profound understanding of various threats. His extensive research, covering topics such as non-Windows malware, future connected healthcare, cyber-espionage campaigns, and ransomware, has been published on Securelist.com, a testament to his expertise and contributions. Known for his exceptional public speaking skills, Dmitry frequently represents Kaspersky at global and local events, leaving a lasting impact on audiences. Additionally, he actively participates in the creation of webinars and videos that delve into the realm of cybersecurity.Publications
Reports
Kimsuky targets organizations with PebbleDash-based tools
Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.
OceanLotus suspected of using PyPI to deliver ZiChatBot malware
Kaspersky researchers uncovered malicious wheel packages in PyPI that targeted both Windows and Linux and contained a dropper delivering malware dubbed ZiChatBot. We attribute this activity to OceanLotus APT.
Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
The Silver Fox group is targeting companies in Russia and India by impersonating tax authorities to distribute ValleyRAT and the new ABCDoor backdoor.
HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns
Kaspersky researchers analyze updated CoolClient backdoor and new tools and scripts used in HoneyMyte (aka Mustang Panda or Bronze President) APT campaigns, including three variants of a browser data stealer.
