Mohammed Aldoub MEMBER_OF Kuwaiti government
Mohammed says he got a job in the Kuwaiti government securing systems.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“I got a job in the government of Kuwait securing systems”
Person
person:mohammed_aldoub
Also: Mohammed Aldoub
Kuwaiti cybersecurity professional and malware analyst who publicly shares security research under the name Voulnet.
Kuwaiti cybersecurity professional and malware analyst who publicly shares security research under the name Voulnet.
“So, my name is Mohammed Aldoub.”
“Mohammed is in his thirties now, but ever since he was a teenager, he was fascinated with computers.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | MEMBER_OF | Kuwaiti government | Explicit | 120 |
| outgoing | ASSOCIATED_WITH | Dan Kaminsky | Explicit | 120 |
| outgoing | USES | Threat hunting | Explicit | 120 |
| outgoing | USES | VirusTotal | Explicit | 120 |
| outgoing | USES | malware analysis | Explicit | 120 |
| outgoing | USES | Indicators of compromise | Explicit | 120 |
| outgoing | USES | Strings extraction | Explicit | 120 |
Mohammed Aldoub MEMBER_OF Kuwaiti government
Mohammed says he got a job in the Kuwaiti government securing systems.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“I got a job in the government of Kuwait securing systems”
Mohammed Aldoub ASSOCIATED_WITH Dan Kaminsky
Mohammed says he was introduced to Dan Kaminsky, whose guidance helped him enter cybersecurity.
Explicit Confidence 98% · Mohammed Aldoub EP 120 Details
“I actually got introduced to the late Dan Kaminsky, and his guidance was really amazing”
Mohammed Aldoub USES Threat hunting
Mohammed describes conducting threat-hunting work to find malware targeting Kuwait and the Gulf region.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“it was usually something regular that we tried to hunt for threats”
“I’m doing that usual threat hunting work”
Mohammed Aldoub USES VirusTotal
Mohammed says he used VirusTotal to look for malware samples and attacks targeting Kuwait and the region.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“One of the best avenues to look for such things is through using VirusTotal”
“I would use it to actually look for attacks that are targeting Kuwait”
Mohammed Aldoub USES malware analysis
Mohammed analyzed fresh malware samples and streamed or discussed his analysis publicly.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“trying to analyze the malware, how it works, what it does to the systems”
“downloaded and analyze it, and actually discussed on Twitter”
Mohammed Aldoub USES Indicators of compromise
Mohammed submitted malware hashes and shared indicators so people in the region could search their environments for the attack.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“submitted the hashes for that piece of malware so that anybody in the region could search for those hashes in their environment”
“these are some highly-probable indicators of compromise”
Mohammed Aldoub USES Strings extraction
Mohammed used strings extraction to identify human-readable strings in the malware, including GBKADMIN.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“I found some strings in those pieces of malware”
“one technique for analyzing malware is to run the command ‘strings’ on it”