Roy Moshailov
Principal Security Engineer
Roy is a head of security and malware research at F5, breaking down even the most sophisticated and evasive attacks into pieces. Previously, he served and led an IDF Intelligence Unit, where he gained extensive hands-on experience in cybersecurity. Roy holds several professional security certifications, and his areas of interest include malware/exploit/shellcode reverse engineering and developed POCs, incident response, active threat hunting, vulnerability assessment, PT, and consulting for small and large companies to solve their security and privacy problems.

Research by Roy Moshailov (8)

Article | Jun 15, 2022
F5 Labs Investigates MaliBot
We found a novel malware strain that is targeting financial sites in Italy and Spain... so far.
20 min read

Article | Jan 6, 2022
FluBot’s Authors Employ Creative and Sophisticated Techniques to Achieve Their Goals in Version 5.0 and Beyond
A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.
11 min read

Article | Mar 4, 2021
How The IcedID Banking Trojan Exploits Pandemic
TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.
6 min read

Article | Dec 9, 2019
DanaBot’s New Tactics and Targets Arrive in Time for Peak Phishing and Fraud Season
DanaBot makes a strong resurgence at the end of 2019, using new tactics and techniques and expanding beyond its traditional banking targets.
13 min read

Article | Apr 30, 2019
Gozi Banking Trojan Pivots Towards Italian Banks in February and March
Gozi authors, who targeted banks in Canada, France, and the US in January 2019, shifted their targets to Italian banks in February 2019.
5 min read

Article | Apr 25, 2019
Panda Malware: It’s Not Just About Cryptocurrencies Anymore
Panda malware is back with a March 2019 campaign that targets U.S. companies, and moves from cryptocurrencies to targeting web giants.
7 min read

Article | Apr 23, 2019
Ramnit Returns to its Banking Roots, Just in Time for Italian Tax Season
Ramnit’s latest configuration targets Europe leading up to tax season, focusing on Italian banks and international online advertisers.
8 min read

Article | Jan 29, 2019
Gozi Adds Evasion Techniques to its Growing Bag of Tricks
Gozi “banking” trojan continues to shift its targets beyond banking as it employs client-side and server-side evasion techniques via time-tested web injection.
7 min read
Results 1-8 of 8
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.