Roy Ricaldi's work aims to advance cybersecurity through threat analysis research. His thesis focuses on the evolution of, and shifts within, the cybercriminal ecosystem. Cybercrime is an organized, complex, and sophisticated business with structured personnel, run by professionals. Roy studies the capabilities, organization, progression, and preferences of offenders in multiple illicit ecosystems. By analyzing the structure, behaviors, and motivations within these spaces, he identifies where credible cyberthreats emerge and how they are distributed. Employing a multidisciplinary approach, he combines artificial intelligence, quantitative monitoring tools, and qualitative methods to study these environments. This work, conducted at Eindhoven University of Technology in collaboration with the Cambridge Cybercrime Centre and the NSCR, aims to enhance threat intelligence and improve cybersecurity defenses against emerging threats.

List of Publications

• Uncovering the trust signals supporting Telegram’s cybercrime economy, co-authored with Tina Marjanov, Luca Allodi, and Alice Hutchings, to appear in the proceedings of the 20th IEEE APWG Symposium on Electronic Crime Research (eCrime 2025).
• Framing Migratory Decisions in the Cybercriminal Underground, co-authored with Luca Allodi, Jai Wientjes, and Adriana Radu, to appear in the proceedings of the 29th International Workshop on Security Protocols (SPW 2025).
• An Experimental Design to Investigate Attacker Actions on an Access-as-a-Service ‘Criminal’ Platform, co-authored with Yasen Yalamov, Michele Campobasso, Luca Allodi, Hannah Kool, Asier Moneva, and Rutger Leukfeldt, in the proceedings of the 10th IEEE European Symposium on Security and Privacy (EuroS&P 2025).

Roy Ricaldi is a PhD candidate in Cybercrime at Eindhoven University of Technology, focusing on the evolution of cybercriminal ecosystems. His academic journey includes undergraduate studies at the University of Kansas, a Master's in Cybersecurity from the University of Padua and multiple exchange programs, at the University of Cambridge, École Normale Supérieure, and the University of Helsinki. With a strong interdisciplinary background in cybersecurity and economics, his research explores innovative frameworks to understand and mitigate cybercrime, alongside developing comprehensive risk models for technological resilience.