Matthieu Faou

Matthieu Faou

Senior Malware Researcher


Education: Ingénieur civil at Mines Nancy / M. Sc. in Computer Engineering at Polytechnique Montréal

Position and history at ESET: I joined ESET in august 2016 as a Malware Researcher.

Favorite activities: Running, cycling, skiing.

What is your golden rule for cyberspace? Use your critical mindset.


25 articles by Matthieu Faou

A dive into Turla PowerShell usage

A dive into Turla PowerShell usage

A dive into Turla PowerShell usage

ESET researchers analyze new TTPs attributed to the Turla group that leverage PowerShell to run malware in-memory only

Matthieu Faou and Romain Dumont • 29 May 2019 • 12 min. read


Turla LightNeuron: An email too far

Turla LightNeuron: An email too far

Turla LightNeuron: An email too far

ESET research uncovers Microsoft Exchange malware remotely controlled via steganographic PDF and JPG email attachments

Matthieu Faou • 07 May 2019 • 6 min. read


OceanLotus: New watering hole attack in Southeast Asia

OceanLotus: New watering hole attack in Southeast Asia

OceanLotus: New watering hole attack in Southeast Asia

ESET researchers identified 21 distinct websites that had been compromised including some particularly notable government and media sites

Matthieu Faou • 20 Nov 2018 • 10 min. read


Supply-chain attack on cryptocurrency exchange gate.io

Supply-chain attack on cryptocurrency exchange gate.io

Supply-chain attack on cryptocurrency exchange gate.io

Latest ESET research shows just how far attackers will go in order to steal bitcoin from customers of one specific virtual currency exchange

Matthieu Faou • 06 Nov 2018 • 5 min. read


PowerPool malware exploits ALPC LPE zero-day vulnerability

PowerPool malware exploits ALPC LPE zero-day vulnerability

PowerPool malware exploits ALPC LPE zero-day vulnerability

Malware from newly uncovered group PowerPool exploits zero-day vulnerability in the wild, only two days after its disclosure

Matthieu Faou • 05 Sep 2018 • 6 min. read


Cryptocurrency web mining: In union there is profit

Cryptocurrency web mining: In union there is profit

Cryptocurrency web mining: In union there is profit

Cryptocurrency mining has been used by cybercriminals to make a quick and easy profit while corrupting the victim’s machine in the process.

Matthieu Faou • 14 Sep 2017 • 11 min. read


Stantinko: A massive adware campaign operating covertly since 2012

Stantinko: A massive adware campaign operating covertly since 2012

Stantinko: A massive adware campaign operating covertly since 2012

Since the beginning of 2017, ESET has been conducting an investigation into a complex threat mainly targeting Russia and Ukraine. Stantinko has stood out.

Frédéric Vachon and Matthieu Faou • 20 Jul 2017 • 6 min. read