Ford Merrill is a senior cybersecurity leader with deep roots in large-scale infrastructure defense and threat intelligence. He played a key role in defending the U.S. financial sector during Operation Ababil, where his real-time sharing of attack data materially helped the wider security community understand and mitigate nation-state DDoS campaigns.

After relocating to Copenhagen, Ford became a core contributor at CSIS Security Group, leading research into DDoS actors, malware operations, phishing ecosystems, and incident response. He was the principal architect behind CSIS’s anti-phishing platform, phishdb, and has presented widely on botnets and cybercrime operations, including Mirai, to industry and law-enforcement audiences. Today, Ford leads Cyber Intelligence Services at CSIS, where he is reshaping the portfolio to meet a rapidly evolving threat landscape. Known for combining hands-on technical credibility with strategic clarity, he brings a practitioner’s perspective to how cybercrime is changing, and what defenders consistently underestimate.