Julia Karpin
Principal Security Engineer
Julia Karpin is a senior malware researcher on the F5 security research team. She has been dealing with financial malware and its shenanigans for most of the current decade. Her main interest is Windows and Android malware, reverse engineering and automating every research aspect that can be automated. She has been a speaker at various security conferences, including REcon (@reconmtl), Virus Bulletin (@virusbtn), and OWASP Israel (@OWASPIL).
Research by Julia Karpin (8)
Article | Sep 6, 2018
Trickbot Gets Trickier by Adding an Encryption Layer
Trickbot authors gain precious time to defraud unsuspecting victims by adding an encryption layer that slows down the malware investigation process.
4 min read
Article | Jul 11, 2018
Tackling Gootkit's Traps
Gootkit malware uses misleading code to hinder manual research and automated analysis.
6 min read
Article | Sep 1, 2017
Wirex Android DDoS Malware Adds UDP Flood
As quickly as attackers commandeer IoT devices to build more “thingbots,” they continue to evolve their attack types and functionality.
4 min read
Article | Mar 27, 2017
From DDoS to Server Ransomware: Apache Struts 2 – CVE-2017-5638 Campaign
A common infection vector used by botnet creators is scanning the Internet for web vulnerabilities to exploit for malware or back doors. The advantage of hitting servers over personal consumer devices is the ability to leverage powerful hardware that is...
9 min read
Article | Nov 7, 2016
Little Trickbot Growing Up: New Campaign
Recently there have been several reports of a financial malware named TrickBot; this malware's code looks similar to Dyre.
4 min read
Article | Nov 11, 2015
Dyre Update: Moving to Edge and Windows 10 With Anti-Antivirus
Dyre malware requires little introduction as it has been the focus of many publications, and it is a well-known threat. One of the reasons for it being so infamous is the frequent changes the authors incorporate in...
4 min read
Article | Jun 24, 2015
Slave Malware Analysis: Evolving From IBAN Swaps to Persistent Webinjects
Slave is financial malware written in Visual Basic. Since 2015 it has evolved from relatively simple IBAN swapping.
2 min read
Article | Apr 30, 2015
VBKlip Banking Trojan Goes Man-in-the-Browser
VBKlip has evolved significantly from searching for IBAN data in copy-paste functionality to MITB techniques.
4 min read
Results 1-8 of 8
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.