Thomas Barabosch | Deutsche Telekom

Thomas Barabosch

Thomas Barabosch

Thomas holds a PhD in computer science and works as a Senior Cyber Security Analyst in the Cyber Threat Intelligence Chapter. He is passionately engaged in malware analysis, threat actor tracking, and bug hunting. Throughout the last years he has found numerous vulnerabilities in low-level software and participated in several botnet take-downs. In his blogs he tells techies and non-techies stories about his adventures in binary code wonderland.

Articles by Thomas Barabosch

Smartphone showing a malware warning

Blog.Telekom

09‑14‑2021

Flubot under the Microscope

Maybe Flubot is for SMS what Emotet was for email: a spam kingpin. How does it work and how do the operators prevent infiltration?

Fists of fire and water meet hard

Blog.Telekom

05‑17‑2021

Let’s set ice on fire: Hunting and detecting IcedID infections

Emotet ist dead. IcedID belongs to the contenders to take its place. This is how you hunt for samples and detect local infections.

Insights into TA505’s ransomware operations.

Blog.Telekom

01‑14‑2021

Inside of CL0P’s ransomware operation

Cybercrime actor TA505 started three waves of spam in 2020 to find new victims. Here are insights into their ransomware operations.

Smokeloader emerged from the Russian cybercrime underground in 2011 but is still alive.

Blog.Telekom

12‑17‑2020

Smokeloader is still alive

One of the oldest malware families that is still in use today learned some new tricks: A special way to encrypt CC server URLs.

Researcher Thomas Barabosch will give recommendations to fight them and share ways to detect TA505 intrusions in your network.

Blog.Telekom

10‑06‑2020

Eager Beaver: A Short Overview of the Restless Threat Actor TA505

Researcher Thomas Barabosch will give recommendations to fight them and share ways to detect TA505 intrusions in your network.