Costin Raiu
More info
- Known for
- Analyses of Flame, Duqu and Equation Group
- Affiliation
- Kaspersky Lab (GReAT)
- Country
- Romania
Romanian malware researcher who ran Kaspersky's GReAT team through the decade when state-built cyberweapons became a research field of their own.
Raiu joined Kaspersky Lab in 2000 and in 2010 took over the Global Research and Analysis Team, the unit that hunts APT actors rather than everyday viruses. Under him GReAT published analyses of Flame (2012), Red October (2013) and the Equation Group (2015) — the last effectively a portrait of the NSA's toolkit that never once said "NSA". The same year the team found Duqu 2.0 living inside Kaspersky's own network.
Raiu is also known for teaching YARA, the rule language that turned hunting for related malware samples into a craft with its own grammar. He left Kaspersky in 2023.