Kevin van Liebergen ☕️
Kevin van Liebergen

Ph.D. Student in Threat Intelligence

About Me

Hi! I’m a PhD student at the IMDEA Software Institute, where I’m part of the software security group led by Prof. Juan Caballero. My research focuses on how malware and cybercrime operates at scale, measuring and characterizing online abuse, including server ransom(ware) scams and phishing kits. My goal is to shed light on these operations to support stronger defenses and contribute to a safer digital environment. I’ve presented my work at major conferences such as NDSS (San Diego, USA), DIMVA (Hamburg, Germany), eCrime (San Diego, USA), and JNIC (Sevilla, Spain).

Before joining IMDEA, I earned an M.Sc. in Cybersecurity from the Universidad de Alcalá and worked as a systems administrator consultant. Outside of academia, I enjoy participating in Capture The Flag (CTF) competitions and have a genuine passion for cybersecurity and systems.

My Erdös number is 4 (Juan Caballero -> Geoffrey M. Voelker -> Ronald. L. Graham -> P. Erdös).

I transform coffee into code, and datasets into knowledge… Or at least I try to.

Interests
  • CTFs (web and rev)
  • RFID
  • AI
Education
  • PhD in Threat Intelligence

    IMDEA Software Institute

  • MSc Cybersecurity, 2022

    Universidad de Alcalá

  • BSc Computer Engineering, 2020

    Universidad de Alcalá

Recent Publications
(2025). Family Ties: A Close Look at the Influence of Static Features on the Precision of Malware Family Clustering. eCrime 2025.
(2025). Clean up the mess: Addressing data pollution in cryptocurrency abuse reporting services. Future Generation Computer Systems 2026.
(2025). All your (data)base are belong to us: Characterizing Database Ransom(ware) Attacks. NDSS 2025.
(2023). Cybercrime Bitcoin Revenue Estimations: Quantifying the Impact of Methodology and Coverage. CCS 2023.
(2023). A Deep Dive into the VirusTotal File Feed. DIMVA 2023.
Recent News