Hi, I'm Jakub.

I'm a cyber-security researcher at Wells Fargo, previously leading counter-fraud and cyber-crime initiatives at PayPal. My work focuses on the detection and mitigation of complex and sophisticated cyber-crime, with a focus on uplifting the industry and ecosystem as a whole.

Publications

• Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale (co-author, 2020)
  USENIX Distinguished Paper Award Winner and Second Prize winner of the 2020 Internet Defense Prize
• A Practical Analysis of the Rise in Mobile Phishing (co-author, 2018)

Patents

• Facilitating cryptocurrency-based transactions with time constraint (2022)
  Risk-based real-time Blockchain-to-fiat conversion for time-sensitive transactions.
• Hot wallet protection using a layer-2 blockchain network (2022)
  Methodology for recovering stolen wallet funds using an invalidation mechanism provided by a trusted third-party.
• Multi-layer cryptocurrency conversions using available blockchain outputs (2022)
  Real-time conversion of cryptocurrency between multiple blockchains based on risk scoring.
• Interface for Constructing Smart Protocols for Execution on Blockchain Platforms (2022)
  Implementation of additional anti-fraud controls using smart contracts and a third-party arbitration service.
• Laundering detection in second layer networks (2021)
  Linking of second-layer traffic (e.g. Lightning Network) to first-layer accounts for potential money laundering detection.
• Automated device data retrieval and analysis platform (2020)
  Detection of spoofed clients using real-time device interrogation and profiling.
• Probabilistic anomaly detection in streaming device data (2020)
  Detection of spoofed devices, social engineering attacks, and other fraudulent activity through cross-cohort analysis.
• Identifying domains for evaluation during transaction processing (2019)
  Transactional risk scoring based on originating and associated domain history, reputation, and technical attributes.
• Tracking device identification data and account activities for account classification (2019)
  Detection of 'aged' accounts through ongoing monitoring of on- and off-platform activity with tiered risk challenges.
• Systems and methods for analyzing vulnerabilities of networked systems (2019)
  Automated ranking of newly reported CVEs and other vulnerabilities using external scan data (Shodan, Censys, etc.) for prioritization and triage.
• Passive and active identity verification for online communications (2017)
  Detection of ATO or other fraudulent activity through the analysis of communication metadata such as typing speed, error rate, grammar and syntax, slang, and other behavioral indicators.
• Automated detection of phishing campaigns via social media (2017)
  A methodology for real-time detection and mitigation of phishing campaigns using firehose streaming of social media posts.
• Threat intelligence system (2017)
  A threat intelligence system designed to OCR images from criminal forums or channels, correlating IOCs (such as partially redacted account and transaction IDs) against internal data sources to surface new leads.
• Dynamic BLE-enabled jukebox (2014)
  A dynamic jukebox system that automatically selects and plays music by analyzing shared musical preferences of nearby users detected through their mobile devices, while factoring in contextual elements like location, time, and user relationships.