Muhammad Muzammil

About

I am currently working as a Sr Staff Security Researcher at Palo Alto Networks. My research is focused on designing and developing systems to protect users from web security threats.

Work Experience

• Palo Alto Networks
  Sr Staff Security Researcher
  Sep 2026 – Present · Santa Clara, CA
• Stony Brook University
  Research Assistant
  Aug 2022 – July 2026 · Stony Brook, NY
• Infoblox
  Web Security Intern
  Jun 2025 – Aug 2025 · Tacoma, WA
• Infoblox
  Web Security Intern
  Jun 2024 – Aug 2024 · Tacoma, WA
• Lahore University of Management Sciences
  Research Assistant
  Aug 2020 – May 2022 · Lahore, Pakistan

Education

• Stony Brook University
  PhD in Computer Science (Web Security)
  2022 – 2026
• Lahore University of Management Sciences
  BS in Computer Science
  2018 – 2022

Publications

• New Trains, Same Rails: Fingerprinting Cryptocurrency Software via Network Requests
  Muhammad Muzammil, Oleksii Starov, Zane Ma, and Nick Nikiforakis
  IFIP Networking Conference (IFIP Networking), 2026
  PDF Cite
  @inproceedings{muzammil2026newtrains, title = {{New Trains, Same Rails: Fingerprinting Cryptocurrency Software via Network Requests}}, author = {Muhammad Muzammil and Oleksii Starov and Zane Ma and Nick Nikiforakis}, booktitle = {IFIP Networking Conference (IFIP Networking)}, year = {2026} }
• No Wallet for Old Tricks: Introducing Context-aware Defenses Against Cryptocurrency-based Social Engineering Attacks
  Muhammad Muzammil, Harsh Shah, and Nick Nikiforakis
  European Workshop on Systems Security (EuroSec), 2026
  PDF Cite
  @inproceedings{muzammil2026nowallettricks, title = {{No Wallet for Old Tricks: Introducing Context-aware Defenses Against Cryptocurrency-based Social Engineering Attacks}}, author = {Muhammad Muzammil and Harsh Shah and Nick Nikiforakis}, booktitle = {European Workshop on Systems Security (EuroSec)}, year = {2026} }
• Echoes of the Past: Detecting and Classifying Re-registered Domains in Enterprise DNS Traffic
  Muhammad Muzammil, Zafir Ansari, Nick Nikiforakis, and Darin Johnson
  Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb), 2026
  PDF Cite
  @inproceedings{muzammil2026echoes, title = {{Echoes of the Past: Detecting and Classifying Re-registered Domains in Enterprise DNS Traffic}}, author = {Muhammad Muzammil and Zafir Ansari and Nick Nikiforakis and Darin Johnson}, booktitle = {Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb)}, year = {2026} }
• The Poorest Man in Babylon: A Longitudinal Study of Cryptocurrency Investment Scams
  Muhammad Muzammil, Abisheka Pitumpe, Xigao Li, Amir Rahmati, and Nick Nikiforakis
  ACM The Web Conference (WWW). Sydney, Australia. 2025
  PDF Cite
  @inproceedings{muzammil2025babylon, title = {{The Poorest Man in Babylon: A Longitudinal Study of Cryptocurrency Investment Scams}}, author = {Muhammad Muzammil and Abisheka Pitumpe and Xigao Li and Amir Rahmati and Nick Nikiforakis}, booktitle = {Proceedings of The Web Conference (WWW)}, year = {2025} }
• Panning for gold.eth: Understanding and Analyzing ENS Domain Dropcatching
  Muhammad Muzammil, Zhengyu Wu, Aruna Balasubramanian, and Nick Nikiforakis
  ACM Internet Measurement Conference (IMC). Madrid, Spain. 2024
  PDF Cite
  @inproceedings{muzammil2024ens, title = {{Panning for gold.eth: Understanding and Analyzing ENS Domain Dropcatching}}, author = {Muhammad Muzammil and Zhengyu Wu and Aruna Balasubramanian and Nick Nikiforakis}, booktitle = {ACM Internet Measurement Conference (IMC)}, year = {2024} }
• Typosquatting 3.0: Characterizing Squatting in Blockchain Naming Systems
  Muhammad Muzammil, ZhengYu Wu, Lalith Harisha, Brian Kondracki, and Nick Nikiforakis
  Symposium on Electronic Crime Research (eCrime). Boston, MA. 2024
  Bronze Medal 🥉
  Media: Fast Company, Science X, The Debrief, CoinTrust, SBU News
  PDF Cite
  @inproceedings{muzammil2024typosquatting, title = {{Typosquatting 3.0: Characterizing Squatting in Blockchain Naming Systems}}, author = {Muhammad Muzammil and ZhengYu Wu and Lalith Harisha and Brian Kondracki and Nick Nikiforakis}, booktitle = {APWG Symposium on Electronic Crime Research (eCrime)}, year = {2024} }
• SoK: A Tale of Reduction, Security and Correctness – Evaluating Program Debloating Paradigms and Their Compositions
  Muaz Ali, Muhammad Muzammil, Faraz Karim, Ayesha Naeem, Rukhshan Haroon, Muhammad Haris, Huzaifa Nadeem, Waseem Sabir, Fahad Shaon, Fareed Zaffar, Vinod Yegneswaran, Ashish Gehani, and Sazzadur Rahaman
  European Symposium on Research in Computer Security (ESORICS). The Hague, Netherlands. 2023
  PDF Cite
  @inproceedings{ali2023debloating, title = {{SoK: A Tale of Reduction, Security and Correctness - Evaluating Program Debloating Paradigms and Their Compositions}}, author = {Muaz Ali and Muhammad Muzammil and Faraz Karim and Ayesha Naeem and Rukhshan Haroon and Muhammad Haris and Huzaifa Nadeem and Waseem Sabir and Fahad Shaon and Fareed Zaffar and Vinod Yegneswaran and Ashish Gehani and Sazzadur Rahaman}, booktitle = {European Symposium on Research in Computer Security (ESORICS)}, year = {2023} }

Magazine Article

• Scams at Scale: Unmasking Crypto Fraud and Social Engineering on the Modern Web
  Abisheka Pitumpe, Muhammad Muzammil, Xigao Li, Nick Nikiforakis, and Amir Rahmati
  XRDS: Crossroads, The ACM Magazine for Students, 2025
  PDF Cite
  @article{abisheka2025scamsatscale, title = {{Scams at Scale: Unmasking Crypto Fraud and Social Engineering on the Modern Web}}, author = {Abisheka Pitumpe and Muhammad Muzammil and Xigao Li and Nick Nikiforakis and Amir Rahmati}, journal = {XRDS: Crossroads, The ACM Magazine for Students}, year = {2025} }

Teaching

• Fall 2024 WISE380: Honeypots and Intrusion Detection

• Spring 2023CSE331: System Fundamentals II
• Fall 2022CSE360: Software Security
• Spring 2022CS100: Computational Problem Solving
• Spring 2021CS331: Introduction to Artificial Intelligence
• Fall 2020 + 2021CS200: Introduction to Programming

Contact