Pierre-Marc Bureau

Pierre-Marc Bureau

Security Intelligence Program Manager


Education? Master Degree in Computer Engineering.

Position and history at ESET? Security Intelligence Program Manager.

What malware do you hate the most? The ones written in VB and Delphi.

Favorite activities? Rock climbing, snowboarding, hiking.

What is your golden rule for cyberspace? Apply the same caution in cyberspace and in real life.

When did you get your first computer and what kind was it? 1988 – Apple II.

Favorite computer game/activity? Losing at Capture the Flag competitions.


58 articles by Pierre-Marc Bureau

Win32/Kelihos, Recruiting in a Country Near You

Win32/Kelihos, Recruiting in a Country Near You

Win32/Kelihos, Recruiting in a Country Near You

Pierre-Marc Bureau • 16 Aug 2011 • 1 min. read


The co-evolution of TDL4 to bypass the Windows OS Loader patch (KB2506014 )

The co-evolution of TDL4 to bypass the Windows OS Loader patch (KB2506014 )

The co-evolution of TDL4 to bypass the Windows OS Loader patch (KB2506014 )

Pierre-Marc Bureau • 10 May 2011 • 2 min. read


The End of Win32/Swizzor?

The End of Win32/Swizzor?

The End of Win32/Swizzor?

Pierre-Marc Bureau • 30 Mar 2011 • 1 min. read


IM to Spread Malware: the Butterfly Effect

IM to Spread Malware: the Butterfly Effect

IM to Spread Malware: the Butterfly Effect

Pierre-Marc Bureau • 16 Nov 2010 • 2 min. read


New malicious LNKs: here we go...

New malicious LNKs: here we go...

New malicious LNKs: here we go...

These new families represent a major transition: Win32/Stuxnet demonstrates a number of novel and interesting features apart from the original 0-day LNK vulnerability, such as its association with the targeting of Siemens control software on SCADA sites and the use of stolen digital certificates, However, the new malware we're seeing is far less sophisticated, and suggests bottom feeders seizing on techniques developed by others. Peter Kosinar comments:

Pierre-Marc Bureau • 22 Jul 2010 • 2 min. read


Win32/Stuxnet Signed Binaries

Win32/Stuxnet Signed Binaries

Win32/Stuxnet Signed Binaries

Pierre-Marc Bureau • 19 Jul 2010 • 1 min. read


Swizzor for Dummies

Swizzor for Dummies

Swizzor for Dummies

Pierre-Marc Bureau • 15 Jul 2010 • 2 min. read


Unpatched Java Deployment Kit Vulnerability Exploited in the Wild

Unpatched Java Deployment Kit Vulnerability Exploited in the Wild

Unpatched Java Deployment Kit Vulnerability Exploited in the Wild

Pierre-Marc Bureau • 15 Apr 2010 • 2 min. read


"Aurora" exploit code: from Targeted Attacks to Mass Infection.

"Aurora" exploit code: from Targeted Attacks to Mass Infection.

"Aurora" exploit code: from Targeted Attacks to Mass Infection.

Pierre-Marc Bureau • 25 Jan 2010 • 2 min. read