
Digital Forensics and Incident Response Specialist
Ahmad Zaidi Said, a Malaysian cybersecurity expert with broad international experience, has more than 14 years of knowledge and experience in the field and has been involved in high-profile cybersecurity incident investigations globally. Joined Kaspersky Global Emergency Response Team (GERT) in 2021 as Digital Forensics and Incident Response (DFIR) specialist, Zaidi brings valuable experience in a variety of cyber security domains, including digital forensics and incident response (DFIR), malware analysis and reverse engineering, threat intelligence, and threat hunting Zaidi is a committee member of the Malaysia Cyber Security Community Organization (MCCO) & rawSEC and active member of the High Technology Cyber Investigation Association (HTCIA), which contribute to the evolution of the cybersecurity ecosystem through information sharing and collaboration. His expertise has also led him to speak at a number of international and local events, in which he has offered vital insights and best practises with a wide range of audiences.According to Kaspersky, Librarian Ghouls APT continues its series of attacks on Russian entities. A detailed analysis of a malicious campaign utilizing RAR archives and BAT scripts.
Kaspersky GReAT experts uncovered a new campaign by Lazarus APT that exploits vulnerabilities in South Korean software products and uses a watering hole approach.
MysterySnail RAT attributed to IronHusky APT group hasn’t been reported since 2021. Recently, Kaspersky GReAT detected new versions of this implant in government organizations in Mongolia and Russia.
Kaspersky researchers analyze GOFFEE’s campaign in H2 2024: the updated infection scheme, new PowerModul implant, switch to a binary Mythic agent.