Okan Kılıçer

Okan Kılıçer is an independent security researcher active since 2012 who identifies malicious sites, phishing kits, and abusive infrastructure. He reports these findings to communities like PhishTank, the Cisco Talos phishing corpus, and urlscan.io. When vulnerabilities are found in public institutions, he reports them directly to the relevant institution.

He operates as a Senior Digital Risk & Brand Protection Specialist for a private group of companies, handling system risk analysis and brand protection across the entire organization. His work includes monitoring for lookalike domains, cloned websites, fake social media accounts, and fake mobile apps to safeguard the group's digital assets. He also detects phishing campaigns and analyzes the infrastructure behind them to ensure early detection.

His expertise includes reverse engineering research where he dissects phishing kits, malicious files, and suspicious applications to understand their targeting mechanisms. He performs static and behaviour analysis on these components to uncover how they operate and what they aim to compromise. This research helps the group prioritize risks based on their potential impact.

For seven years, he ran his own mining hardware, including ASICs and GPU rigs, to mine Bitcoin, Ethereum, Ethereum Classic, and Ravencoin. This experience gave him deep knowledge of pool credentials, firmware sources, remote management, and power/thermal limits. He also understands the attacks that target hashrate while leaving the wallet secure.

He is currently focused on local AI projects, which involve building datasets, improving their efficiency, and training or fine-tuning models on his own hardware. This work complements his broader interest in post-quantum cryptography and its effects on systems like TLS termination and DDoS mitigation. He reads standards and runs implementations to keep notes on how these new schemes affect existing infrastructure.

He identifies and assesses risks across the group's systems and digital assets, then prioritizes them by impact. This process covers risk assessment, digital asset analysis, and attack surface prioritization to ensure the most critical vulnerabilities are addressed first. He systematically evaluates the potential damage each risk could cause to the organization.

To protect the group's brands, he monitors for misuse such as lookalike domains, cloned websites, fake social media accounts, and fake mobile apps. He also detects phishing pages and campaigns aimed at the group and its brands, analyzing the infrastructure behind them. This proactive monitoring helps prevent brand dilution and fraud before they escalate.

He detects phishing pages and campaigns targeting the group and its brands, then analyzes the infrastructure supporting them. His work involves identifying phishing kits and understanding the broader campaign structure. This allows for early detection and rapid response to potential threats.

He takes apart phishing kits, malicious files, and suspicious applications to understand their mechanics and targets. This reverse engineering research involves static analysis and behaviour analysis to determine how these tools function. The goal is to reveal the underlying strategies used by attackers against the group's systems.

His mining infrastructure expertise covers GPU rigs, ASICs, pool security, firmware management, and the specific attacks targeting hashrate. He gained this knowledge through seven years of operating his own mining rigs for multiple cryptocurrencies. This hands-on experience informs his understanding of hardware vulnerabilities and security protocols.

He creates datasets, improves dataset efficiency, and trains and fine-tunes local AI models on his own hardware. This process involves building custom datasets and optimizing their performance for specific AI tasks. The entire workflow runs locally, allowing for tailored model development without external dependencies.

He has been active in the security research field since 2012, making him a long-standing independent researcher. His work spans identifying malicious sites, phishing kits, and abusive infrastructure, as well as post-quantum cryptography. He is not affiliated with any company, allowing for independent analysis and reporting.

Some reviewers praise his thoroughness in identifying phishing kits and analyzing infrastructure, noting his ability to detect threats early. Others appreciate his direct reporting method for vulnerabilities found in public institutions, ensuring issues are addressed promptly. The consensus highlights his commitment to both brand protection and system security.

He offers services in system risk analysis, brand protection, phishing detection, and reverse engineering research. These services are tailored to help organizations identify and mitigate digital risks effectively. Clients can engage him for comprehensive assessments that cover attack surfaces and digital asset vulnerabilities.

He is located in a private group of companies where he serves as a Senior Digital Risk & Brand Protection Specialist. His work covers the entire group, integrating risk analysis and brand protection across all digital assets. He is available for contact through his website to discuss specific needs or collaborations.