Meet Modat at Underground Economy 2026
7 to 10 September 2026, at the Council of Europe in Strasbourg, France. We are a Gold Sponsor, our founder Soufian El Yadmani was selected to present, and three of us are there across the four days.
Gold Sponsor
- Dates
- 7 to 10 September 2026
- Where
- Strasbourg, France
- Modat is
- Gold Sponsor
- Soufian
- Presenting, details at the event
Selected to present at UE26
Soufian El Yadmani
Founder & CEO, Modat
Soufian is presenting at UE26
His proposal was picked from the open call, a conference where every session is chosen on the strength of the case behind it. We are not able to share the subject, the slot or the room ahead of the event, so the only way to see it is to be there. Come with questions.
Session details
Not shared ahead of the conference. Attend to find out what he is presenting, or book a slot with us and we will meet you there.
The underground economy runs on infrastructure. Infrastructure leaves a trace.
Every panel, proxy, phishing kit and cash-out route has to exist somewhere reachable before it earns anyone money. Modat profiles that layer of the internet continuously, so the preparation is visible while there is still time to act on it.
Why we are at UE26
This is the audience that turns infrastructure into outcomes
Criminal infrastructure is built before it is used
Phishing kits, panels, bulletproof hosts and payment funnels all sit on the internet, configured and reachable, in the window before a campaign goes live. That window is where the underground economy is visible, and where it can still be disrupted.
Attribution needs infrastructure, not just indicators
A feed gives you a domain. Understanding who is behind it means pivoting across certificates, banners, hosting patterns and behaviour over time, and holding the history to prove the link.
The people in the room act on it
UE26 gathers analysts, threat intelligence practitioners, law enforcement and policymakers. That mix is precisely who turns infrastructure evidence into takedowns, referrals and policy.
What to do with us there
Come with a case, not a calendar slot
Bring a live case
Bring an indicator you are stuck on: a domain, an IP, a certificate, a panel. We will pivot it in Magnify with you and see what the surrounding infrastructure says.
Test the history
Ask what a host looked like months ago. Historical profiles are where campaign preparation and re-use across operations tend to show up.
Talk research, not roadmap
Our researchers will be there. If you work the same ecosystems, we would rather compare notes on methodology than give you a product pitch.
We will run it in front of you
No slideware. We open Magnify, take your indicator, and pivot until the surrounding infrastructure either supports your hypothesis or kills it. If it kills it, that is a useful hour too.
Nothing you bring to the table leaves it. We will not retain, publish or reuse your case material without your explicit say-so.
What we are showing
The platform, and what is new in it
Strasbourg is where we put the newest version of the platform in front of the people who stress-test it hardest. Come and try to break it.
Announcing at UE26
The new Modat Magnify, in the room with the people who stress-test it hardest.
Strasbourg is the first time we put the new platform in front of this community: a rebuilt workspace for searching, pivoting and monitoring internet-scale infrastructure, with history and behaviour attached to every host rather than looked up separately. We will be running it live across the four days, and we would rather you tried to break it than watched a slide about it.
Already shipped, and what we will be demonstrating alongside it:
Shipped June 2026
Passive DNS in the investigation graph
Native Passive DNS, connecting resolution history to everything else we hold on a host, in one graph rather than three tools.
Shipped May 2026
Modat MCP: query Magnify from any AI tool
Point your own agent or assistant at Magnify over MCP and let it do the pivoting, without leaving the tool you already work in.
Shipped June 2026
EclecticIQ IntelligenceCenter integration
Enrich the infrastructure behind an indicator inside the threat intelligence platform your team already runs.
Our research on the criminal economy
Where we have already been looking
Stadium of Shadows: Inside the IPTV Piracy World
Pirate panels, burner domains and rebranded apps around the 2026 World Cup, and the organised crime the money flows to.
Scammers Target Dutch Taxpayers in Seasonal Phishing Surge
Fake Belastingdienst pages moving to interactive scams, with a growing focus on stealing cryptocurrency.
Neutralizing the Watchdog
A modular cryptomining campaign that disables security tooling, uncovered with Recorded Future.
Closest to your work
Three use cases that fit this room
Who you will meet
Three of us, across the four days
Founders and practitioners, not a booth team reading from a script.
Soufian El Yadmani
Founder & CEO
Presenting at the conference; the subject and slot are not shared ahead of it. The person to take an indicator to if you want to pivot through it together.
Vincent Thiele
Co-Founder & COO
Has run security from the buying seat: ING Bank’s CISO department, then Cybersprint and Darktrace. Best for programme, procurement and NIS2 or DORA conversations.
Karen Sundermann
Head of Public Sector
The right person if you work in government, law enforcement or a national CSIRT.
Practicalities
Before you travel
Underground Economy 2026 is hosted by Team Cymru, co-hosted with the Council of Europe. Modat is a Gold Sponsor, but admission is handled entirely by the organisers, not by us.
How do I get in?
Invite-only, free to attend for vetted applicants. Apply through the official event page. Our sponsorship does not give us any say in vetting, so we cannot expedite or vouch for an application.
Official UE26 event page ↗Are you speaking?
Yes. Soufian El Yadmani, our founder and CEO, was selected from the open call. We are not able to share what he is presenting, or when, ahead of the conference, so the only way to see it is to attend.
Where do I find Modat on site?
We are waiting for the programme to be released, and we will say where to find us as soon as it is publicly announced. Book a slot and we will send you the exact spot the moment we have it, or just find us in the halls: there are only three of us.
Can we meet if I am not attending?
Yes. Book a call and we will do the same walkthrough remotely, in your own time zone.
UE26 · Strasbourg, France
See what attackers see. Understand what they intend.
You do not have to wait for Strasbourg. The platform is live: start on the Free plan and run the case you cannot close.