Dark web analytics for ransomware threat actor profiling

By August 1st, 2025

Project overview

Project title

Dark web analytics for ransomware threat actor profiling

Project description

This project investigates active ransomware groups and attempts to identify their key characteristics, attack signatures, victims, and stolen data. The expected outcome is development of a dataset to serve as an essential resource. The project will potentially provide more knowledge on ransomware groups, their tactics, techniques, and procedures for launching attacks.

Supervisory team

University

Name of university supervisorDr Mohiuddin Ahmed
Name of universityEdith Cowan University
Email addressMohiuddin.ahmed@ecu.edu.au
FacultySchool of Science

CSIRO

Name of CSIRO supervisorDr Sid Chau
Email addresssid.chau@data61.csiro.au
CSIRO Research UnitData61

Industry 1

Name of industry supervisorRuman Sarawer
Name of business/organisationCyberProof
Email addressruman.sarawer@cyberproof.au

Industry 2

Name of industry supervisorRavi Ravindran
Name of business/organisationWhite Field Australia Pty Limited
Email addressravi.ravindran@whitefieldaustralia.com

Further details

Primary location of studentEdith Cowan University, School of Science, Joondalup WA 6027, Australia
Industry engagement component locationCyberProof: Level 29, 221 St Georges Terrace, Perth, WA 6000

White Field Australia Pty Ltd: 40 Endeavour Avenue, Bull Creek WA 6149, Australia
Other locationsCSIRO Marsfield, 26 Pembroke Road, Marsfield NSW 2122, Australia
Ideal student skillsetA hard working and driven candidate with problem-solving and management skills

Experience with malware analysis, machine learning and publishing research in high quality venues

Strong cyber security background and data analysis skills are highly desirable
Application close dateOpen until position filled
ApplyContact Dr Mohiuddin Ahmed