Muhammad Gamal
High-Tech Crime Investigator
Group-IB
With 10+ years in cybersecurity, I specialize in cybercrime investigations and digital threat intelligence, helping organizations and law-enforcement partners identify, track, and disrupt malicious actors operating online.
I hold multiple industry certifications, including OSCP, eCPTX v2, CCTA, OSWP, eWPTX, eMAPT, CTIA, CCFI, RastaLabs, APTLabs, and CEH, demonstrating strong technical expertise and continuous professional development.
As a Cyber Crime Investigator at Group-IB, I investigate fraud, phishing, data breaches, and ransomware, conducting dark web investigations, threat actor attribution, infrastructure tracking, and intelligence analysis to support disruption efforts.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
CrypTX: Trace the Chain. Reveal the Network.
Cryptocurrency-enabled crime ransomware, scams, sanctions evasion, and laundering through mixers and cross-chain bridges has outpaced the tooling available to most investigators. Commercial blockchain forensics platforms (Chainalysis, TRM, Elliptic) solve much of this, but their cost places them out of reach for independent researchers, smaller law-enforcement units, CERTs, and emerging-market financial institutions. CrypTX closes that gap. CrypTX is a full-stack, open cryptocurrency OSINT and forensics platform that brings professional-grade investigation capabilities into a single self-hostable tool. It covers 13 blockchains (BTC, ETH, TRON, SOL, BSC, and more) and combines in-house forensic engines for wallet clustering, cross-chain tracing, Tornado Cash and bridge demixing, risk scoring, and cash-out detection none of which depend on costly third-party subscriptions. In this Arsenal session, attendees will see a live, end-to-end investigation: screening an address against OFAC and multi-jurisdiction sanctions lists, attributing it via Know-Your-VASP and Arkham, tracing stolen funds through a multi-hop visual graph, unmasking mixer activity, and auto-generating a Suspicious Activity Report and FATF Travel Rule message. We will also demonstrate CrypTX's Model Context Protocol (MCP) server, which lets AI agents like Claude drive investigations conversationally a novel direction for accessible blockchain forensics.Investigators, threat-intel analysts, and compliance teams will leave with a free, extensible toolkit they can deploy immediately to trace illicit crypto flows and produce regulator-ready evidence.
- 16:20
- Tue
- 01 Dec
Stage:
Arsenal 3
Sessions Type:
Keynote