Roy Moshailov

Principal Security Engineer

Roy is a head of security and malware research at F5, breaking down even the most sophisticated and evasive attacks into pieces. Previously, he served and led an IDF Intelligence Unit, where he gained extensive hands-on experience in cybersecurity. Roy holds several professional security certifications, and his areas of interest include malware/exploit/shellcode reverse engineering and developed POCs, incident response, active threat hunting, vulnerability assessment, PT, and consulting for small and large companies to solve their security and privacy problems.

Research by Roy Moshailov (8)

F5 Labs Investigates MaliBot

Article | Jun 15, 2022

F5 Labs Investigates MaliBot

We found a novel malware strain that is targeting financial sites in Italy and Spain... so far.

20 min read

FluBot’s Authors Employ Creative and Sophisticated Techniques to Achieve Their Goals in Version 5.0 and Beyond

Article | Jan 6, 2022

FluBot’s Authors Employ Creative and Sophisticated Techniques to Achieve Their Goals in Version 5.0 and Beyond

A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.

11 min read

How The IcedID Banking Trojan Exploits Pandemic

Article | Mar 4, 2021

How The IcedID Banking Trojan Exploits Pandemic

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

6 min read

DanaBot’s New Tactics and Targets Arrive in Time for Peak Phishing and Fraud Season

Article | Dec 9, 2019

DanaBot’s New Tactics and Targets Arrive in Time for Peak Phishing and Fraud Season

DanaBot makes a strong resurgence at the end of 2019, using new tactics and techniques and expanding beyond its traditional banking targets.

13 min read

Gozi Banking Trojan Pivots Towards Italian Banks in February and March

Article | Apr 30, 2019

Gozi Banking Trojan Pivots Towards Italian Banks in February and March

Gozi authors, who targeted banks in Canada, France, and the US in January 2019, shifted their targets to Italian banks in February 2019.

5 min read

Panda Malware: It’s Not Just About Cryptocurrencies Anymore

Article | Apr 25, 2019

Panda Malware: It’s Not Just About Cryptocurrencies Anymore

Panda malware is back with a March 2019 campaign that targets U.S. companies, and moves from cryptocurrencies to targeting web giants.

7 min read

Ramnit Returns to its Banking Roots, Just in Time for Italian Tax Season

Article | Apr 23, 2019

Ramnit Returns to its Banking Roots, Just in Time for Italian Tax Season

Ramnit’s latest configuration targets Europe leading up to tax season, focusing on Italian banks and international online advertisers.

8 min read

Gozi Adds Evasion Techniques to its Growing Bag of Tricks

Article | Jan 29, 2019

Gozi Adds Evasion Techniques to its Growing Bag of Tricks

Gozi “banking” trojan continues to shift its targets beyond banking as it employs client-side and server-side evasion techniques via time-tested web injection.

7 min read

Results 1-8 of 8

Stay up to date with F5 Labs

Get the latest threat intelligence and research delivered to your inbox.

Roy Moshailov - Threat Intelligence & Research | F5 Labs