Subset AB

Vi är ledande experter, konsulter och utvecklare inom cybersäkerhet, informationssäkerhet och IT-säkerhet. Genom vår unika metodik – Cybersäkerhets Integrations Modellen (CIM) och dess metodik – tillämpar vi en strategisk bedömning som fokuserar på den förmåga våra kunder önskar uppnå, vare sig det gäller att stärka skyddet mot specifika hot, förbättra effektiviteten eller snabba upp säkerhetshöjande processer.

Vi kan erbjuda stöd, insiktsfulla råd och vägledningar som direkt adresserar en organisations nuläge, specifika behov, risker och utmaningar.

Med vår hjälp kan organisationer navigera genom komplexiteten inom cybersäkerhetslandskapet och ta beslut som stärker deras förmåga att möta dagens och morgondagens utmaningar och som en oberoende aktör utgår vi alltid ifrån fakta och vad som är bäst för kunden.

Head of Sales

SHAARPEC by Hallandia V AB

SHAARPEC, a development project for data-driven healthcare system management and personalized precision health.

Skills: Value Propositions · Startups ·Storytelling · Customer-Focused Selling · Customer Relationship Management (CRM) · Leadership · New Business Development · Skill Development · Presentation Skills · People Management · P&L Management · Negotiation · Demand Generation · Marketing Strategy · Sales Processes · Direct Sales · Sales Enablement · International Sales · Sales Management · Executive Management · Business Strategy · Cross-functional Team Leadership

Sr Sales Executive

InterSystems

Responsible for all our activities in Scandinavia 
Change management/ Split and restart of the region
Reconnect/recruited channel partner
Won back several lost accounts
Wrote a new regional market strategy
Established Intersystems as a thought leader
Upsell to existing accounts and partners
Full P&l
Overachieved annual budget (109%)

Built and promoted Intersystems brand in Scandinavia
Early adopter of inter systems social selling program
P&l

Skills: Value Propositions · Storytelling · Customer-Focused Selling · Customer Relationship Management (CRM) · Leadership · New Business Development · Skill Development · Presentation Skills · People Management · P&L Management · Negotiation · Demand Generation · Marketing Strategy · Sales Processes · Direct Sales · Sales Enablement · International Sales · Sales Management · Executive Management · Business Strategy · Cross-functional Team Leadership

Sales Executive

Nordstrom Business Consulting AB

Company Owner

Wallarm Inc.

AI Powered Application security
Two Year project to help the founders build the team and get the series A funding
Owner of GMT and Channel acquisition
Created a global channel strategy
Changed and implemented pricing strategy and legal steering documents
Signed GTM partnership agreement with Google, AWS, Docker
Critical account management, reenabled and won back 3 largest accounts. 
Recruited and coached 10 channel partners
Presented at several international events
Company growth 100+ percent year over year in Q3/18
Company closed the full A-series investment round in Nov 2018

Skills: Value Propositions · Startups ·Storytelling · Customer-Focused Selling · Customer Relationship Management (CRM) · Leadership · New Business Development · Skill Development · Presentation Skills · People Management · P&L Management · Negotiation · Demand Generation · Marketing Strategy · Sales Processes · Direct Sales · Sales Enablement · International Sales · Sales Management · Executive Management · Business Strategy · Cross-functional Team Leadership

Chief Business Development Officer (Interim)

Positive Technologies

One Year contract
Project lead to list the company in the GMQ
Lead and developed international sales 
Recruited 10 channel partners
Full ownership of GTM strategies and alliances, GCP, Checkpoint, AWS
Sr Advisor to HQ and CEO

Skills: Value Propositions · Startups ·Storytelling · Customer-Focused Selling · Customer Relationship Management (CRM) · Leadership · New Business Development · Skill Development · Presentation Skills · People Management · P&L Management · Negotiation · Demand Generation · Marketing Strategy · Sales Processes · Direct Sales · Sales Enablement · International Sales · Sales Management · Executive Management · Business Strategy · Cross-functional Team Leadership

VP Global Business Developement (Interim)

Tufin

Won back critical accounts, Telia, Telenor, H&m
Business/Territory reengineering
Developed Tufin business in the Nordic, Russian Federation and CiS.
Built and lead a virtual sales and consulting team cross the region
Signed 14 new resellers
Direct relations and carrying quota on Key accounts
Acquired 15 new accounts

Skills: Value Propositions · Startups ·Storytelling · Customer-Focused Selling · Customer Relationship Management (CRM) · Leadership · New Business Development · Skill Development · Presentation Skills · People Management · P&L Management · Negotiation · Demand Generation · Marketing Strategy · Sales Processes · Direct Sales · Sales Enablement · International Sales · Sales Management · Executive Management · Business Strategy · Cross-functional Team Leadership

Sr Director of Sales Nordics, Russian Federation, Eurasia & CiS

EgoSecure

Six-month contract with one-month extension
Independent contractor at vendor in Endpoint security 
Scope: Change project and business reconstruction.

BDM (Interim)

Imperva

Data and Application security (WAF, DAM, DBF)
Established Imperva as the leading Data security vendor in the Region
Recruited 40+ partners in the Nordics, Russia and CiS
Direct relations with Key accounts
Acquired 50+ new accounts
Successfully established Imperva as the No 1 WAF/Data security vendor in the region
Overachieved annual quota in 4 out of 5 years
Chairman’s club 2013

Regional Sales Director Russian Federation & CIS

Arbor Networks, the security division of NETSCOUT

A leader in identify and mitigating Ddos attacks
Established a channel strategy.
Negotiated and signed several resellers in Sweden, Norway, Finland, Iceland and the 	Baltic's
Negotiated and signed frame agreements with the largest carriers and enterprise 	business in the region, Telia Sonera, Telenor, TDC, Comhem and Nokia 
KEY account management, closed on and above targets
Overachieved annual quota 112%

Territorial Manager Nordic & Baltics


📌 ABOUT ME
Experienced business developer. Sales, new business and Interim manager. 
Father, and more important Grandfather, loves to travel and to meet new people and cultures.

📌 My ”Why”, in life and profession:

I have a strong ethical drive in everything I do, both private as well as professional and I have a strong belief that we can solve the most challenging problems or situations with human interactions and dialogue.

I also believe that Data, no matter where it resides, traverse or being used, needs to be healthy, clean, protected and usable, and I want to be a part to drive better decisions, actions, and outcomes for people and organisations.

📌 EXPERTISE & TRACK RECORD
- over 25 years experience in different B2B sales roles
- over 14 years experience as Interim C-Roles and Business development
- over 12 years of international business development
- Introduced and established new solutions and companies in foreign regions
- Experienced in social selling 


✉ 
📞 

Im happy to share that I start as head of sales at Subset AB, more info to follow on my profile page.

Johan Nordstrom

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts

Source: Bleeping Computer
Date Published: March 25, 2024

Excerpt:

"Cybercriminals have been increasingly using a new phishing-as-a-service (PhaaS) platform named 'Tycoon 2FA' to target Microsoft 365 and Gmail accounts and bypass two-factor authentication (2FA) protection.

Tycoon 2FA was discovered by Sekoia analysts in October 2023 during routine threat hunting, but it has been active since at least August 2023, when the Saad Tycoon group offered it through private Telegram channels.

The PhaaS kit shares similarities with other adversary-in-the-middle (AitM) platforms, such as Dadsec OTT, suggesting possible code reuse or a collaboration between developers."


To read the complete article see:

bleepingcomputer.com • 3 min read

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts

Join Our Team! Are you passionate about cybersecurity? Ready to elevate your career in the field? We’re hiring for several positions to join our team Stockholm. 

Don’t miss this rare opportunity to make a difference!

https://karriar.subset.se/


karriar.subset.se • 1 min read

Välkommen till vår karriärsida - Subset

Cybercriminals Transform Raspberry Pi Into A Tool For Fraud And Anonymization: GEOBOX Discovery

Source: Resecurity 

Date Published: March 25, 2024
Excerpt:

"Resecurity identified a new solution advertised on the Dark Web – GEOBOX, a custom software, purpose-built for Raspberry Pi devices, representing an evolution in tooling for fraud and anonymization. Notably, the cybercriminals transformed widely used geek-favorite device into a 'plug-and-play' weapon for digital deception – enabling the operator to spoof GPS locations, emulate specific network and software settings, mimic settings of known Wi-Fi access points, as well as bypass anti-fraud filters.

The GEOBOX tool was first discovered during an investigation into an online banking theft involving a high-net-worth (HNW) client of a leading Fortune 100 financial institution. This discovery led to the acquisition of GEOBOX for more in-depth analysis. The malicious individuals utilized several GEOBOX devices, each connected to the Internet and strategically placed in various remote locations. These devices served as proxies, significantly enhancing their anonymity. This approach complicated the investigation and tracking process, especially since, by default, GEOBOX devices do not store any logs.

Resecurity envisions the tactics leveraging custom-made or modified devices like Raspberry Pi and other Internet-of-Things (IoTs) will be more actively used by bad actors, creating a new challenge for law enforcement internationally."


To read the complete article see:

resecurity.com • 5 min read

Cybercriminals Transform Raspberry Pi into a Tool for Fraud and Anonymization: GEOBOX Discovery

Info stealer attacks target macOS users!

Source: Security Affairs

Date Published: April 1, 2024

Excerpt:

"The malicious site includes a link to download Arc for macOS. Sometimes, the sponsored link would also direct us to an identical malicious website (airci[.]net).

The disk image file (DMG) downloaded from the site is signed ad-hoc and provides instructions to right-click the app and select open thus overriding any Gatekeeper warnings.

“Similar to previous variants of Atomic stealer, it contains minimal strings as most of them are xor encoded to avoid detection which is a common technique for evading static signatures.” reads the report published by Jamf Threat Labs.

“This variant of Atomic stealer will call a function named bewta(), which de-xors various bytes with the hardcoded xor key 0x91.”

Jamf also spotted another attack that used a malicious website named meethub[.]gg that claims to offer virtual meeting software for the call."


To read the complete article see:

securityaffairs.com • 2 min read

Info stealer attacks target macOS users

Security Vulnerability of HTML Emails

Source: Schneier On Security
Date Published: April 8, 2024

Excerpt:

"This is a newly discovered email vulnerability:

The email your manager received and forwarded to you was something completely innocent, such as a potential customer asking a few questions. All that email was supposed to achieve was being forwarded to you. However, the moment the email appeared in your inbox, it changed. The innocent pretext disappeared and the real phishing email became visible. A phishing email you had to trust because you knew the sender and they even confirmed that they had forwarded it to you."

To read the complete article see:

https://lnkd.in/dnDuY-n9


schneier.com • 1 min read

Security Vulnerability of HTML Emails

Starry Addax targets human rights defenders in North Africa with new malware

Source: Cisco Talos

Date Published: April 9, 2024

Excerpt:

"Cisco Talos is disclosing a new threat actor we deemed “Starry Addax” targeting mostly human rights activists associated with the Sahrawi Arab Democratic Republic (SADR) cause with a novel mobile malware.

Starry Addax conducts phishing attacks tricking their targets into installing malicious Android applications we’re calling “FlexStarling.”

For Windows-based targets, Starry Addax will serve credential-harvesting pages masquerading as login pages from popular media websites."


To read the complete article see:

blog.talosintelligence.com • 5 min read

Starry Addax targets human rights defenders in North Africa with new malware

Raspberry Robin Now Spreading Through Windows Script Files

Source: HP
Date Published: April 10, 2024


Excerpt:

"First identified in late 2021, Raspberry Robin is a Windows worm initially seen targeting technology and manufacturing organizations. It has since grown to become one of the most prevalent threats facing enterprises. In March, the HP Threat Research team identified a change in the way cybercriminals are spreading Raspberry Robin. The malware is now being delivered through Windows Script Files (WSF). The scripts are highly obfuscated and use a range of anti-analysis techniques, enabling the malware to evade detection. Historically, Raspberry Robin was known to spread through removable media like USB drives, but its distributors have also experimented with other initial infection file types. In this article, we’ll share the background on Raspberry Robin, document the new infection method and how to analyze the downloader script."


To read the complete article see:

threatresearch.ext.hp.com • 8 min read

Raspberry Robin Now Spreading Through Windows Script Files | HP Wolf Security

TA547 Targets German Organizations with Rhadamanthys Stealer

Source: Proofpoint
Date Published: April 10, 2024

Excerpt:
 
"What happened
 
Proofpoint identified TA547 targeting German organizations with an email campaign delivering Rhadamanthys malware. This is the first time researchers observed TA547 use Rhadamanthys, an information stealer that is used by multiple cybercriminal threat actors. Additionally, the actor appeared to use a PowerShell script that researchers suspect was generated by large language model (LLM) such as ChatGPT, Gemini, CoPilot, etc.
 
Emails sent from the threat actor impersonated the German retail company Metro purporting to relate to invoices.
 
To read the complete article see:

Taplio

Johan Nordstrom's Linkedin Analytics

Johan Nordstrom

Johan Nordstrom's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Johan Nordstrom's Linkedin Analytics

Johan Nordstrom

Johan Nordstrom's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Johan Nordstrom's Linkedin Analytics

Johan Nordstrom's Best Posts (last 30 days)