Aleksandr Matrosov

Matrosov's research documents technically difficult malware and bootkit ecosystems that defenders need to understand. His conference work and reports connect low-level analysis to practical threat intelligence.

Overview

Aleksandr Matrosov is a security researcher specializing in malware analysis, reverse engineering, and advanced exploitation techniques. ESET and Black Hat biographies document research roles spanning ESET, Intel Security, and later work on firmware and hardware topics.

His work examines malicious code that operates below or around conventional application layers, including bootkits and rootkits. Such analysis helps defenders recognize persistence and evasion techniques that can otherwise be difficult to observe.

Matrosov has co-authored technical research on threats including Stuxnet, TDL, Festi, and bootkit families, and has presented at international security conferences. The record here focuses on his documented research and conference contributions.

Timeline

2003Begins work as a security researcher, according to his ESET biography.
2009-10Joins ESET as a malware researcher.
2012Co-authors research on the Festi botnet and anti-forensic techniques.
2015Black Hat biography lists him in Intel Security's Advanced Threat Research team.
2019Presents research on modern Secure Boot attacks at Black Hat Asia.

Sources

Aleksandr Matrosov

Type: Person
Era: 2000s-Present
Known for: Researching malware, rootkits, bootkits, and advanced threats; Co-authoring research including Stuxnet Under the Microscope and work on TDL; Presenting at REcon, Virus Bulletin, AVAR, CARO, and Black Hat; Research on firmware and hardware attack surfaces
Key date: 2003
Tags: malware analysis, reverse engineering, bootkits, firmware security, threat research

Created by Joas A Santos · Something wrong or want it removed? Open an issue.