Work Expertise Process About Contact on LinkedIn

Cyber Threat Intelligence, AI & External Risk

Protecting organizations from digital exposure, identity compromise, and adversary threats — with intelligence and AI.

I help security leaders reduce external exposure, detect identity compromise from infostealers and breaches, disrupt impersonation and fraud, and deliver actionable intelligence during incidents. I also research and build AI systems that make threat intelligence sharper, faster, and more persistent.

Notable Work & Contributions

A selection of high-impact projects, investigations, and industry contributions spanning over 15 years in cyber threat intelligence and applied AI research.

What I Do

My work spans these core areas of external threat intelligence, risk, and applied AI.

External Threat Intelligence

Monitoring and analyzing threats from dark web forums, marketplaces, and underground channels. I help organizations understand what adversaries are saying about them and planning against them.

Executive & Identity Risk

Assessing exposure of executives and key personnel to identity compromise, credential theft, and targeted attacks. This includes infostealer analysis and personal data exposure mapping.

Dark Web & Infostealer Intelligence

Deep expertise in compromised credentials, session tokens, and sensitive data exposed through infostealer malware. I've analyzed millions of stealer logs and understand how threat actors weaponize this data.

Fraud & Impersonation Threats

Identifying brand abuse, executive impersonation schemes, and fraud infrastructure targeting organizations. I've worked extensively in crypto where these threats are particularly sophisticated.

Incident Intelligence Support

When things go wrong, I help teams understand what happened, what's exposed, and what the adversary perspective looks like. Rapid intelligence during breaches and security incidents.

Adversary-Focused Investigations

Attribution, threat actor profiling, and investigative support. I've collaborated with law enforcement globally and understand how to build intelligence that supports real-world action.

Applied AI for Security

Researching and building AI systems that enhance intelligence workflows — from neural memory architectures that give agents persistent, compressed recall across sessions, to automated reconnaissance and threat analysis pipelines. I work at the intersection of AI and security operations.

I typically work as an embedded consultant or advisor, either augmenting existing security teams or providing specialized expertise on specific problems. Most engagements start with a conversation about what you're trying to solve.

How Engagements Work

A straightforward process designed for security leaders and executives.

01

Discovery Call

A brief conversation to understand your organization, concerns, and what you're looking to achieve. No commitment required.

02

Rapid Exposure Assessment

I conduct an initial assessment of your external exposure to identify immediate risks and demonstrate value before any ongoing engagement.

03

Delivery & Actions

Clear, executive-ready deliverables with prioritized findings and actionable recommendations your team can implement immediately.

04

Ongoing Monitoring

Optional continuous monitoring and retainer engagement for organizations that want persistent visibility into external threats.

All engagements are conducted with strict confidentiality. Sensitive findings are communicated through secure channels, and client information is never disclosed.

Fabio Correia

I'm a senior Cyber Threat Intelligence professional with over 15 years of experience in external threat intelligence, dark web research, adversary-focused investigations, and applied AI research.

My career spans founding threat intelligence platforms, leading intelligence functions at major cryptocurrency exchanges, working as an analyst at leading external threat intelligence vendors, and conducting independent AI research focused on security applications. I've collaborated with global law enforcement agencies and contributed research that has been cited across the security industry.

I bring an external perspective to organizations that need to understand and respond to threats beyond their perimeter. My work focuses on translating complex threat intelligence into clear, actionable insights for executives and security leaders — and increasingly, on building AI systems that make that intelligence more persistent, efficient, and automated.

Based in Lisbon, Portugal. Available globally.
Fabio Correia
15+ Years in CTI
Global Client Base
Dark Web Intelligence Executive Protection Infostealer Analysis Threat Research Incident Intelligence Identity Risk Applied AI AI Security Research

Ready to discuss your external threat intelligence needs?

The best way to reach me is through LinkedIn. I respond to all professional inquiries within 24-48 hours.

Contact on LinkedIn