Sébastien Duquette

Sébastien Duquette

Malware Researcher


Education? Graduate in Computer Science at Université du Québec à Montréal.

Highlights of my career? Took part in the investigation on Georbot in spring 2012.

Position and history at ESET? Malware Researcher, ESET Canada. With ESET for 2 years.

What malware do you hate the most? Exploit kits.

Favorite activities? Cycling, Starcraft 2.

What is your golden rule for cyberspace? Keep your software up to date.

When did you get your first computer and what kind was it? Commodore 64 when I was 7 years old.

Favorite computer game/activity? Starcraft 2.


13 articles by Sébastien Duquette

MSIL/Agent.PYO: Have botnet, will travel

MSIL/Agent.PYO: Have botnet, will travel

MSIL/Agent.PYO: Have botnet, will travel

ESET's researchers recently encountered a piece of malware targeting the filling of the forms belonging to the Consulate of Poland. To understand why it is first necessary to have a brief look at the application process for visas.

Sébastien Duquette • 29 Jan 2015 • 3 min. read


Two recently patched Adobe Flash vulnerabilities now used in Exploit Kits

Two recently patched Adobe Flash vulnerabilities now used in Exploit Kits

Two recently patched Adobe Flash vulnerabilities now used in Exploit Kits

Two Flash vulnerabilities that were fixed by Adobe 2 weeks ago are now being used in exploit kits. This is in addition to a third vulnerability, CVE-2014-0556, that was patched in September and that has also been added to Nuclear EK last week.

Sébastien Duquette • 31 Oct 2014 • 2 min. read


How to make sure Adobe Flash is up-to-date and enabling it on-demand

How to make sure Adobe Flash is up-to-date and enabling it on-demand

How to make sure Adobe Flash is up-to-date and enabling it on-demand

Learn how to update Adobe Flash Player, to help protect against malware attacks.

Sébastien Duquette • 31 Oct 2014 • 2 min. read


Interactive exploit kit redirection technique

Interactive exploit kit redirection technique

Interactive exploit kit redirection technique

The usual pattern we see when dealing with exploit kits starts with a legitimate website that gets compromised and used to automatically redirect its visitors to the actual malicious content.

Sébastien Duquette • 20 Jun 2014 • 3 min. read


The Home Campaign: overstaying its welcome

The Home Campaign: overstaying its welcome

The Home Campaign: overstaying its welcome

The Home Campaign is a malware campaign that uses a modified variant of Darkleech to direct visitors to the Blackhole exploit kit. We want to give a better idea of the size and extent of this campaign.

Sébastien Duquette • 02 Jul 2013 • 4 min. read


Sinkholing of Trojan Downloader Zortob.B reveals fast growing malware threat

Sinkholing of Trojan Downloader Zortob.B reveals fast growing malware threat

Sinkholing of Trojan Downloader Zortob.B reveals fast growing malware threat

Malware infecting 25,000 computers, mostly in the United States, pumping out 80 million spam messages per hour? ESET researchers sinkhole to investigate Win32/TrojanDownloader.Zortob.B

Sébastien Duquette • 08 Mar 2013 • 5 min. read


Linux/SSHDoor.A Backdoored SSH daemon that steals passwords

Linux/SSHDoor.A Backdoored SSH daemon that steals passwords

Linux/SSHDoor.A Backdoored SSH daemon that steals passwords

Sébastien Duquette • 24 Jan 2013 • 3 min. read


Foxxy Software Outfoxed?

Foxxy Software Outfoxed?

Foxxy Software Outfoxed?

Sébastien Duquette • 07 Aug 2012 • 4 min. read


Spam campaign uses Blackhole exploit kit to install SpyEye

Spam campaign uses Blackhole exploit kit to install SpyEye

Spam campaign uses Blackhole exploit kit to install SpyEye

Sébastien Duquette • 15 Dec 2011 • 2 min. read