Bold Action Against Fraud: Disrupting Storm-1152
The Ask: Tell the complex, behind-the-scenes story of Microsoft's multi-year investigation and legal takedown of a major cybercrime-as-a-service operation.
My Role: I synthesized legal filings, technical reports, and multi-team interview transcripts into a single, cohesive narrative about strategic threat disruption.
The Outcome: A Security Insider feature that showed how Microsoft paired technical action with legal strategy to take down a cybercrime-as-a-service operation.
Read feature story
Read feature story
Feeding from the Trust Economy: Social Engineering Fraud
The Ask: Go beyond simple "don't get phished" advice and explain the sophisticated psychological tactics that make modern social engineering so effective.
My Role: I turned transcripts from threat intelligence experts into a journalistic narrative that explains why these scams work, not just how to spot them.
The Outcome: An anchor feature for Security Insider that showed security leaders how fraudsters exploit trust, and why technical controls alone don't stop them.
Read feature story
Read feature story
US Healthcare at Risk: Strengthening Resiliency Against Ransomware Attacks
The Ask: Create a focused, industry-specific report on the unique ransomware threats facing the healthcare sector, emphasizing the grave risk to patient care.
My Role: I synthesized threat intelligence data and expert interview transcripts into a report that paired technical attack patterns (TTPs) with their real-world impact on patient care.
The Outcome: An industry report for Security Insider that showed healthcare CISOs how ransomware groups target their organizations and what it takes to stay resilient.
Read feature story
Read feature story
Marketing at Chicago Booth: Executive Profiles for the Kilts Center
The Ask: Establish Chicago Booth — already a top business school, but known for finance and economics — as a serious force in data-driven marketing, and build the standing of its Kilts Center for Marketing by turning a roster of accomplished people into feature stories worth reading.
My Role: I interviewed each subject and built their profile from recorded transcripts into a first-person narrative in their own voice — an agency CEO in Shanghai, the CEO of Zipcar, marketing leaders at Redbox and American Express, and Booth faculty.
The Outcome: A set of print feature profiles, each carrying the subject's voice and story, that gave the Kilts Center's brand a human face — including linked pieces designed to be read together, like a mentor and his student profiled as a matched pair.
Tax Season Cybersecurity: What Cybercriminals Want and Who They Target Most. Is It You?
The Ask: Detail the specific cybercriminal tactics used during tax season and clearly identify who is most at risk, from individual filers to overworked accounting firms.
My Role: Working from SME kickoff call transcripts, I wrote a practical guide that traced the attack chain from social engineering to financial exploitation and identity theft.
The Outcome: A seasonal Security Insider article that showed general business readers and accounting professionals how tax-season attacks work and who they hit hardest.
Read feature story
Read feature story
Promotion & Amplification
The Ask: Provide social promotion assets to accompany each Security Insider article — typically a set of options per story, such as one animated and two still.
My Role: I wrote the social copy and provided the creative concept for each execution — a description of the image or animation sequence that a design colleague then brought to life. Across FY24 I produced 63 social ads in this way, beyond my original scope.
The Outcome: A steady stream of promotion assets that drove readers to the articles during FY24, the year Security Insider engagement grew 601%. One of my favorites is the divorce-agreement phish animation below, built around Microsoft's Sherrod DeGrippo, Director of Threat Intelligence Strategy and a leading voice in the field.
