Cybersecurity researcher at @TUeindhoven. Penetration testing for fun. Biker, climber, piano and CTF player.

Joined October 2016
I'm proud to announce that our (mine and @securescientist's) latest work, after almost two years of excitement and tears, will be presented at #USENIX Security Symposium 2023! Preprint version here ⬇️, and a summary in the comments ⬇️⬇️ arxiv.org/abs/2303.03249 #usesec23
1
1
1
10
5,867
Michele Campobasso retweeted
Are we ready for a world where our data is exposed at a glance? @CaineArdayfio and I offer an answer to protect yourself here: tinyurl.com/meet-ixray
375
1,559
1,133
5,254
1,248,396
I was not aware of the rights and responsibilities set by the European Digital Services Act with regards to the measures to mitigate and to set platforms accountable for the spread of potentially harmful content. So proud to be a European citizen. #DSA #FreedomOfSpeech #Europe
With great audience comes greater responsibility #DSA As there is a risk of amplification of potentially harmful content in 🇪🇺 in connection with events with major audience around the world, I sent this letter to @elonmusk 📧⤵️
1
101
Michele Campobasso retweeted
Many tradeoffs exist in managing the flow of offensive cyber capabilities. @__winn, @jamessshires, @HostileSpectrum, @HowellONeill, @alpha_centauri3, et al. dive into AaaS markets, emphasizing the need to understand, partner & shape these transactions - atlanticcouncil.org/in-depth…
1
9
443
In case you missed it, here's my presentation at USENIX Security '23 about attacker preferences that we derived from the market activity of Genesis Market, a market for user impersonation at scale ➡️ youtu.be/wNDoncVyIjI Paper here ➡️ usenix.org/system/files/usen…
4
121
📢 What do we know about #pathways into and out of financial-economic #cybercrime? If you want to find out, don't miss Joeri Loggen's new systematic narrative review, together with Rutger Leukfeldt and myself, out in Computer Law & Security Review. 👇🏼 sciencedirect.com/science/ar…
1
7
9
1,174
Breaking News! Well humanity, we did it, even if just for one day. Yesterday, Nov. 18, was the first time in recorded history that the global 2m surface temperature breached 2.0°C above the 1850-1900 IPCC baseline. The long-term average remains below 1.5°C. But not for long.
269
3,427
467
7,066
1,533,425
It did not take too long to find a buyer for the golden goose. I wonder if there will be a rebranding and how the underground will react.
2
190
A few considerations on the announced Genesis Market sale that I spotted last Friday. Thanks @AlexMartin for providing me a platform with this on-point article!
3
216
(1/2) Latest updates from Genesis Market. The .onion domain is still up, but last bot dates May 29th. In fact, in June 28th the admins announced they will sell the store to who has "their own traffic flow"...
2
2
2
11
1,362
(2/2) ... "[...] with all the developments, including a complete database (except for some details of the client base), source codes, scripts, with a certain agreement, as well as server infrastructure." Curious to see if new admins will succeed/overcome the bad rep it now has.
1
158
And it was a fruitful session! I loved to see the crowd reacting to my presentation. Many interesting perspectives on how to estimate market success from the way they operate wrt their participants & activity!
1
1
1
4
732
Interesting insights about argot use in underground forums at #WEIS23 from Jack Hughes, Andrew Caines & @message4bob. Forum participants drop argot the more reputable they get. Interested to see if this is just related to sellers (to be professional) or not.
4
443
Sneak peeking in the #WEIS23 conference hall while having the last sandwich. The program is thrilling! In the afternoon (4:40PM) I'll be presenting our last paper on economic characteristics of prominent underground markets. Check it out here ➡️ weis2023.econinfosec.org/wp-…
3
100
Proud to announce that our (me & @securescientist) paper (2+ years in the process) on the relevance of #underground #cybercriminal communities will be presented at the #WEIS workshop in Geneva this July! Paper ⬇️ michelecampobasso.github.io/… #cybercrime #markets #threatintelligence
2
2
17
1,418
Overall, "successful"/"good" markets have more stable characteristics than "unsuccessful"/"bad" markets, suggesting that "good" cybercriminals do not randomly choose where to advertise their products, but rather seek for those with certain characteristics.
1
64
Personal note: this is an example of why a multidisciplinary approach to complex problems should be preferred. Tackling cybercrime as a merely technical problem excludes the human from the loop. To fully understand cybercrime we need joint efforts b/w CS, human sciences & economy
2
65