---
title: David Catalan Alegre
description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies.
canonical_url: https://www.acronis.com/en/tru/authors/catalan-alegre-david/
locale: en
last_updated: 2026-10-11
---

*   [Home](https://www.acronis.com/en/tru/)
*   [Articles](https://www.acronis.com/en/tru/posts/)
*   David Catalan Alegre

![Image 1: David Catalan Alegre](https://staticfiles.acronis.com/images/content/ddebc53f13b53f0b6c6d5311ffc91b76.png)

# David Catalan Alegre

TRU Researcher, Acronis Threat Research Unit (TRU)

David has worked in the malware research field since 2017, building deep expertise across the cybersecurity threat landscape. He specializes in malware reverse engineering and advanced threat hunting and has de-obfuscated some of the most complex and heavily protected malware families in the wild. David is known for his ability to uncover high-end threats, analyze sophisticated obfuscation techniques, and translate deep technical research into actionable insights for defenders.

14 April 2026

### [New JanaWare ransomware targets Turkey via Adwind RAT](https://www.acronis.com/en/tru/posts/new-janaware-ransomware-targets-turkey-via-adwind-rat/)

The Acronis TRU team identified a threat cluster leveraging a customized Adwind (Java RAT) variant with polymorphic characteristics to deliver a ransomware module, tracked as ‘JanaWare.' Analysis of malware samples, infrastructure and telemetry indicates the campaign is likely focused on Turkish users.

04 November 2025

### [The DragonForce Cartel: Scattered Spider at the gate](https://www.acronis.com/en/tru/posts/the-dragonforce-cartel-scattered-spider-at-the-gate/)

Acronis Threat Research Unit (TRU) analyzed DragonForce, a Conti-derived ransomware-as-a-service active since 2023, documenting its malware, affiliate model and links to Scattered Spider.