Inside the Mind of a Malware Hunter

Originally published in the   

How Newmann Lim is Building a Global Community to Fight the Digital Threats Canada Cannot See

Before the crowds form around any cybersecurity conference, Newman Lim is usually already at work. For him, the heart of the field has always been an adversarial game, a constant contest of creativity between defenders and those trying to outsmart them. That dynamic is what first drew him into cybersecurity and what continues to shape both his professional life as manager of cyber security at Odium Brown and his global educational initiative, Malware Village.

Lim’s path into the industry began at Simon Fraser University and moved through a series of experiences that sharpened his technical discipline. His early roles at Electronic Arts, where he worked in programming and game testing, helped establish the work ethic and problem solving mindset he would bring into cybersecurity. His first true step into the field came at Inkra Networks, where he joined the firewall team as an engineering intern and worked on the 1504 firewall module. It was his first time writing code that would help protect real networks from real adversaries. When Fortinet later acquired part of Incor Networks, Lim took pride in knowing that some of his early work might live on in modern firewalls.

Today he leads cyber security at Odium Brown, an investment firm that depends on his ability to navigate a fast moving threat landscape. But his impact extends far beyond his day job. He is also the founder of Malware Village, a global community dedicated to teaching practical malware analysis and defence techniques to learners at every level.

Malware Village was created to solve a clear problem. People entering the field needed accessible, hands-on education that removed barriers and provided real experience working with malicious code. Lim’s mission is simple. Equip learners with the skills, techniques and understanding to combat malware, and unite them through an inclusive community that brings newcomers, students, intermediate researchers and seasoned experts together.

The workshops he and his team deliver at conferences such as Defcon, BSides and AVAR reflect that philosophy. Participants are guided by veteran instructors who show them how malware behaves, how it bypasses defences and how defenders can analyze it safely and effectively. To make the subject more approachable for younger audiences, Malware Village created Malmons, a series of cartoon styled malware creatures that turn complex concepts into engaging visuals.

The community is now expanding beyond physical conferences. Lim is actively working on a Malware Village podcast and is developing online coursework in partnership with respected researchers including the Russian Panda, malware jake and Patrick Wardell. His goal is to make high quality malware education available globally, at scale and without the exclusivity that often surrounds advanced cyber learning.

For Lim, the technical challenge of adversaries fuels his passion. He describes moments during investigations when attackers reveal unexpected creativity in how they deploy or conceal malware. Those discoveries become learning opportunities and reminders that defenders must continuously evolve. Lim calls this the cat and mouse aspect of cybersecurity, a dynamic that keeps the work intellectually alive.

That perspective is central to the advice he offers newcomers. Cybersecurity is a vast field with many domains, from governance and risk to incident response, digital forensics, live defence on SOC teams and offensive security. Instead of chasing trends, Lim urges newcomers to identify the area that genuinely excites them. His guiding question is straightforward. What could you do for eight hours straight without it feeling like a job. Once they know that answer, he believes they can build a long and challenging career.

While the industry invests heavily in new technology, Lim cautions that foundational problems continue to give attackers easy openings. The bad actors are still deploying malware, still phishing for credentials and still exploiting long standing weaknesses. Many organizations have not fully addressed cyber hygiene or the technical debt that accumulates over years of deferred investment.

Even so, Lim sees meaningful opportunity in emerging AI tools. He describes AI as a force multiplier that can help human analysts by offering prompts, recommendations and reminders during high pressure investigations. In his view, AI does not replace human judgment but supports it, especially during complex or stressful events. A timely nudge to examine memory or recheck a persistence mechanism can prevent mistakes and sharpen the investigative process. Lim sees this augmented approach as one of the most promising developments in the field.

His final message is directed at industry veterans. Lim believes experienced professionals have a responsibility to educate and support the next generation. Just as earlier cohorts learned foundational programming languages such as Assembly and C plus plus, the next generation must learn to become fluent in AI. Preparing them requires intentional mentorship, open teaching and the willingness to share knowledge rather than guard it.

This ethos is the foundation of Malware Village. Lim is not simply teaching people how malware works. He is helping create a community where curiosity is encouraged, learning is shared and people from all backgrounds can build the skills needed to defend society from evolving digital threats. At a time when Canada faces rising cyber attacks and a growing need for skilled professionals, his work offers a model for what modern cybersecurity leadership can look like.

Get in touch with Neumann here.