cyber.hendryadrian.com
Security Insights · threatfabric.com

Fusion Fireside #14: John Fokker on Cybercrime, Threat Intelligence and Fraud

· Original article ↗

Summary

Trellix threat intelligence leader John Fokker discusses his law-enforcement background, AI’s effect on attacks, Black Basta, and why CISOs should integrate threat intelligence into fraud prevention.

Key points

  • Fokker moved from the Dutch Marine Corps to the Dutch National High-Tech Crime Unit and co-founded the NoMoreRansom Project.
  • He leads a 50-person threat intelligence team that processes hundreds of millions of malicious file detections monthly.
  • Fokker says generative AI is reshaping attack patterns and making detection and attribution more complex.
  • He cites the Black Basta case as an example of blurred lines between cybercrime and nation-state activity.
  • He urges CISOs to integrate threat intelligence into fraud prevention workflows to identify coordinated campaigns involving stolen identities and payment systems.
  • He advises security leaders to empower teams, stay agile, and prepare for emerging threats in 2026.

Article Details

Topic
Interview with John Fokker on threat intelligence, cybercrime, and the convergence of cyber threats with financial fraud.

People

John FokkerVice President of Threat Intelligence Strategy at Trellix; the interview discusses his career in cybercrime investigations and threat intelligence.

Vendors

TrellixIn the final Fusion Fireside episode of 2025, we sit down with John Fokker, Vice President of Threat Intelligence Strategy at Trellix.

Related Articles