Malwaretech

What Malwaretech does

MalwareTech is a personal cybersecurity research and education platform operated by British security researcher Marcus Hutchins. Founded in 2013, it operates not as a registered business entity but as a personal brand comprising two principal offerings: the MalwareTech Blog, a long-running technical publication covering malware analysis, reverse engineering, Windows internals, vulnerability research, and offensive security, and MalwareTech Labs, an interactive learning platform with 11 reverse-engineering challenges organized into five categories (Strings, Command & Control, Shellcode, Virtualization, and Multistage) that simulate real-world malware behavior in a safe environment with custom-written samples communicating only with a simulated command-and-control server.

The platform is operated by a single individual alongside Hutchins's day role as a Threat Intelligence Analyst at Expel. Content is distributed freely with no paywall, registration, or pricing tier; monetization is not formalized but a [email protected] address exists for speaking engagements, partnerships, and product reviews. Reach is driven by community-led content distribution across the MalwareTech Blog, an email newsletter, a Discord community, and social channels (Twitter/X, YouTube, Instagram, TikTok, Facebook), where Hutchins maintains a following of hundreds of thousands.

MalwareTech's reputation is anchored by Hutchins's discovery and activation of the WannaCry ransomware kill switch in May 2017, an effort conducted in collaboration with the UK's National Cyber Security Centre (NCSC). That incident, together with his June 2020 Wired Magazine cover feature, defines the platform's brand equity and primary differentiation: practitioner-grade technical content produced by a recognized threat intelligence analyst rather than a corporate publishing operation.

Name

Malwaretech

Legal name

MalwareTech

Website

https://malwaretech.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

MalwareTech is a personal cybersecurity research and education platform operated by Marcus Hutchins, offering a free technical blog on malware analysis and reverse engineering plus an interactive MalwareTech Labs challenge environment for security learners.

Ownership category

akta.pro rank

Product category

Cybersecurity Education and Research

NAICS

Software Publishers (5132)

akta.pro primary industry

Cybersecurity Learning Platforms (EDAFANAF)

akta.pro secondary industries

Digital Forensics & Malware Analysis (EDAOAIAJ), Deception Technology & Threat Hunting (HDADAGAI)

Keywords

• Malware analysis education
• Reverse engineering training
• Cybersecurity research
• Vulnerability research
• Threat intelligence blog

Headquarters

HQ city

Los Angeles

HQ country

United States

HQ region

North America

Markets served

GTM type

B2C

Offering type

Digital Commerce or Content

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Blog Content (Free): Free educational blog content on malware analysis, reverse engineering, vulnerability research, and cybersecurity topics. No direct revenue from blog content.
2. Consulting and Speaking: Business inquiries for speaking engagements, partnerships, and product reviews. Contact email [email protected] available for engagements.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels6 records

Core offering

MalwareTech is a personal cybersecurity research blog and education platform operated by Marcus Hutchins that publishes in-depth technical articles on malware analysis, reverse engineering, vulnerability research, Windows internals, and offensive security. It also offers MalwareTech Labs, an interactive learning environment with 11 reverse engineering challenges across five categories (Strings, Command & Control, Shellcode, Virtualization, and Multistage) that use custom-written samples communicating only with simulated command-and-control servers. All content is freely accessible, with paid engagements limited to speaking and consulting inquiries.

Product overview

MalwareTech is a personal cybersecurity research and education platform operated by Marcus Hutchins. It consists of two main offerings: the MalwareTech Blog, a widely-read security research publication covering malware analysis, vulnerability research, Windows internals, and offensive security topics; and MalwareTech Labs, an interactive learning platform with 11 reverse engineering challenges organized into five categories (Strings, Command & Control, Shellcode, Virtualization, and Multistage). The blog serves as both educational content and threat intelligence, while the labs provide hands-on practical training in safe simulated environments.

Differentiator

Problem solved

Functional benefit

Brands

• MalwareTech Labs: A library of reverse engineering challenges designed to provide immersive malware analysis experience without handling live malware.

Products and services

• MalwareTech Blog A personal blog and cybersecurity research platform by Marcus Hutchins covering malware analysis, reverse engineering, vulnerability research, Windows internals, offensive security, and security topics. Aimed at security researchers, malware analysts, and aspiring cybersecurity professionals.
• MalwareTech Labs An educational platform providing hands-on reverse engineering challenges that replicate real-world malware techniques, designed to teach malware analysis skills in a safe virtual environment without handling live malware. Targets aspiring and professional security researchers and reverse engineers.
• Strings Labs Three static analysis labs focusing on extracting and analyzing text strings from malware, designed for beginners to learn string extraction techniques. Part of MalwareTech Labs.
• Command & Control Labs Three labs focused on analyzing malware that communicates with command-and-control servers, testing ability to work with opaque C2 infrastructure. Part of MalwareTech Labs.
• Shellcode Labs Three labs teaching analysis of position-independent shellcode used in software exploitation and malware obfuscation. Part of MalwareTech Labs.
• Virtualization Lab One advanced lab covering CPU virtualization techniques used by malware to obscure functionality through custom programming language implementations. Part of MalwareTech Labs.
• Multistage Labs One lab focused on analyzing multi-stage malware infection chains, requiring analysis through complex kill chain stages. Part of MalwareTech Labs.

Quantifiable outcome

• Active sinkhole infrastructure that tracked WannaCry infections across 416,989 networks globally, estimating approximately 12 million individual systems infected

Segments1 record

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• NCSC UKcoreOthers · 1 May 2017UK National Cyber Security Centre provided valuable threat intelligence sharing during the WannaCry incident. Their threat intelligence sharing program helped identify the malware family behind the attack and ensured MalwareTech's sinkholes were not mistaken for criminal infrastructure.

Scale indicators2 records

Recent moves4 records

Expansion highlights3 records

Broad incumbents

• SANS Institute: Established cybersecurity training and certification body — a broad incumbent in the same cybersecurity education category that MalwareTech Labs addresses at smaller scale.
• OffSec (Offensive Security): Provider of OSCP and other offensive-security certifications with hands-on lab environments — adjacent to MalwareTech Labs but focused on credentialed, paid training at scale.

Direct peers

• TryHackMe: Hands-on cybersecurity learning platform with guided labs and challenges — the closest commercial analogue to MalwareTech Labs' reverse-engineering challenge format.
• Cybrary: Cybersecurity learning platform offering free and paid courses across defense and offensive topics — overlaps MalwareTech's audience of aspiring and practicing security researchers.
• Schneier on Security: Bruce Schneier's personal cybersecurity blog. Another single-expert thought-leadership platform in the same niche, monetized primarily through books, speaking, and advisory work.
• Krebs on Security: Brian Krebs' personal investigative cybersecurity blog — the most direct structural analogue to MalwareTech as a single-author, brand-driven cybersecurity research and news platform.
• Hack The Box: Hands-on cybersecurity learning platform with labs, CTFs, and enterprise training — comparable to MalwareTech Labs in challenge-based learning for offensive security.

Emerging players

• TCM Security: Cybersecurity training provider (Practical Ethical Hacking, PJWT) with a personal-brand-led course catalog — a younger, more commercial version of the expert-led training niche MalwareTech occupies.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/malwaretechblog
• YouTubeyoutube.com/c/MalwareTechBlog?sub_confirmation=1
• Facebookfacebook.com/MalwareTech
• Instagraminstagram.com/malwaretech
• TikToktiktok.com/@malwaretech

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Malwaretech