Robert McArdle
Director of Cybercrime Research · TrendAI™
13 articles
-
ResearchRethinking the External Attack Surface: Managing the Growing Risk of Open Cyber-Physical Data
China-aligned operational relay box (ORB) infrastructure is harvesting open sensor data at scale, and most defenders can't see it. Our report dives into how these ORBs can use open telemetry for data collection and other purposes.
September 10th, 2026 6 minFyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article
-
ResearchTrendAI™ and CleanDNS: From Blocking Attacker Infrastructure to Removing It From the Internet
TrendAI™ and CleanDNS have partnered to go beyond blocking malicious domains. Learn how we are actively dismantling the infrastructure that cybercriminals depend on and removing attacker domains from the internet before attacks reach their targets.
May 18th, 2026Robert McArdle, Chris Lewis-Evans
Read article -
ResearchUnconventional Attack Surfaces: Identity Replication via Employee Digital Twins
In this second installment of a series exploring emerging AI-driven attack surfaces, TrendAI™ Research focuses on employee digital twins: AI replicas of employees that create new vectors for identity compromise, data exfiltration, and persistent access.
March 26th, 2026 34 minKirill Gelfand, Vladimir Kropotov, Fyodor Yarochkin, Robert McArdle
Read article -
ResearchHow Unmanaged AI Adoption Puts Your Enterprise at Risk
We challenge assumptions about AI models by revealing real-world biases and limitations, and the impact of poorly managed AI adoptions.
January 21st, 2026 4 minJosiah Hagen, Vladimir Kropotov, Robert McArdle, Fyodor Yarochkin
Read article -
ResearchThe Next Phase of Cybercrime: Agentic AI and the Shift to Autonomous Criminal Operations
We dive into the transformation from “Cybercrime-as-a-Service“ to “Cybercrime-as-a-Sidekick“, which fundamentally alters the operational dynamics of criminal enterprises.
December 9th, 2025 6 minStephen Hilt, Robert McArdle
Read article -
ResearchDo Security Blogs Enable Vibe-Coded Cybercrime?
Security companies routinely publish detailed analyses of security incidents, making attacker tactics, techniques, and procedures (TTPs) widely known and visible. These reports often provide comprehensive insights into specific vulnerabilities that are or could be exploited, malware delivery mechanisms, and evasion techniques.
September 4th, 2025 5 minRyan Flores, Numaan Huq, Vladimir Kropotov, Robert McArdle…
Read article -
ResearchThe Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground
We dive into one of the most sophisticated and impactful ecosystems within the global cybercrime landscape. Our research looks at tools and techniques, specialized forums, popular services, plus a deeply ingrained culture of secrecy and collaboration.
April 8th, 2025 11 minFyodor Yarochkin, Vladimir Kropotov, Robert McArdle
Read article -
ResearchAI Assistants in the Future: Security Concerns and Risk Management
The article explores the evolving landscape of AI digital assistants, highlighting their transformative potential, associated security risks, and the importance of robust design and collaboration to ensure a secure and user-centric future.
December 6th, 2024 15 minVincenzo Ciancaglini, Salvatore Gariuolo, Stephen Hilt, Robert McArdle…
Read article -
ResearchUNWIRED: Understanding the Unforeseen Risks in Evolving Communication Channels
This article outlines the strategic risks linked to the growth of natively connected internet of things (IoT) devices that operate outside traditional cybersecurity controls.
September 2nd, 2024Vladimir Kropotov, Robert McArdle, Fyodor Yarochkin
Read article -
ResearchUnderstanding Ransomware Using Data Science
Our research paper shows how decision-makers that are in a position to affect ransomware at scale – including policy-makers and industry leaders – can use data-science approaches to understand ransomware risk holistically and build cybersecurity strategies that can affect the ransomware ecosystem as a whole.
February 23rd, 2023 6 minVladimir Kropotov, Bakuei Matsukawa, Robert McArdle, Fyodor Yarochkin…
Read article -
ResearchInside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec
Bulletproof hosting (BPH) services have long been crucial parts of the cybercriminal infrastructure. How do they protect malicious activities, and how do cybercriminals use them to stay in business?
October 6th, 2020 5 minVladimir Kropotov, Robert McArdle, Fyodor Yarochkin
Read article -
ResearchCommodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals
The provision of services, as well as the way criminals operate in the underground, have gone through many changes over the years to cater to the market’s different infrastructure demands.
September 1st, 2020 8 minVladimir Kropotov, Fyodor Yarochkin, Robert McArdle
Read article -
ResearchHacker Infrastructure and Underground Hosting 101:Where Are Cybercriminal Platforms Offered?
Underground platforms are part of a mature ecosystem for trading cybercrime goods and services. How does a capable hosting infrastructure allow illicit activities to thrive?
July 21st, 2020 5 minVladimir Kropotov, Robert McArdle, Fyodor Yarochkin
Read article