01THREAT INTELLIGENCE
KRATOS PhaaS
Anatomy of a modern phishing operation
Read field note COMMAND CENTER / ONLINE
CIBERCAPITÁN / SECURITY INTELLIGENCE / 2026
CIBERCAPITÁN
Cybersecurity.
Threat Intelligence.
Defending the Digital World.
Independent research, strategic insight and practical defense against the threats shaping modern work.
RAFAEL LOPEZSecurity Engineer & Cybersecurity Evangelist
01ABOUT THE OPERATOR
Security is a
human problem.
I'm Rafael — a security engineer and evangelist focused on the space where people, identity and technology meet.
My work helps teams understand how attacks really happen, then build defenses that work in the real world. No theatre. Just clear thinking and better security.
01Threat Intelligence02Email Security03Phishing & BEC04Identity & OAuth attacks05Threat Hunting06Mobile Security07Security Research
02FIELD NOTES
Research for
the curious.
Technical analysis and field notes on the tactics, technologies and human stories behind today's most persistent threats.
02IDENTITY & OAUTH
EVILTOKENS
OAuth abuse beyond traditional phishing
Read field note03EMAIL SECURITY
BEC
From compromised mailbox to financial fraud
Read field note04MOBILE SECURITY
MOBILE PHISHING
Why the browser is becoming the new attack surface
Read field note03ON THE RECORD
Conversations
that matter.
From conference stages to private briefings, I make complex security topics useful, memorable and actionable.
Invite me to speak01 / KEYNOTEFrom inbox to incident:
the anatomy of a BEC attack
the anatomy of a BEC attack
02 / WEBINAROAuth is the new perimeter
03 / BRIEFINGReading the signals in
modern threat intelligence
modern threat intelligence
04WORKBENCH
Tools for a
safer world.
Selected projects, experiments and open research. More coming soon.
PROJECTS / 2026IN DEVELOPMENT
05START A CONVERSATION