Unsupervised Detection and Clustering of Malicious TLS Flows. - Gibran Gómez; Platon Kotzias; Matteo Dell'Amico; Leyla Bilge; Juan Caballero (CoRR, 2021)

Watch Your Back: Identifying Cybercrime Financial Relationships in Bitcoin through Back-and-Forth Exploration. - Gibran Gómez; Pedro Moreno-Sanchez; Juan Caballero (CCS, 2022)

Detecting Cybercriminal Bitcoin Relationships through Backwards Exploration. - Gibran Gómez; Pedro Moreno-Sanchez; Juan Caballero (CoRR, 2022)

GoodFATR: A Platform for Automated Threat Report Collection and IOC Extraction. - Juan Caballero; Gibran Gómez; Srdjan Matic; Gustavo Sánchez; Silvia Sebastián; Arturo Villacañas (CoRR, 2022)

Cybercrime Bitcoin Revenue Estimations: Quantifying the Impact of Methodology and Coverage. - Gibran Gómez; Kevin van Liebergen; Juan Caballero (CCS, 2023)

The Rise of GoodFATR: A Novel Accuracy Comparison Methodology for Indicator Extraction Tools. - Juan Caballero; Gibran Gómez; Srdjan Matic; Gustavo Sánchez; Silvia Sebastián; Arturo Villacañas (Future Gener. Comput. Syst., 2023)

Sorting Out the Bad Seeds: Automatic Classification of Cryptocurrency Abuse Reports. - Gibran Gómez; Kevin van Liebergen; Davide Sanvito; Giuseppe Siracusano; Roberto Gonzalez; Juan Caballero (CoRR, 2024)

All your (data)base are belong to us: Characterizing Database Ransom(ware) Attacks. - Kevin van Liebergen; Gibran Gómez; Srdjan Matic; Juan Caballero (NDSS, 2025)