Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-23 ⋅ Group-IB ⋅ Group-IB
JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake
AdaptixC2 reGeorg
2026-06-10 ⋅ Group-IB ⋅ Sharmine Low, Vladimir Timofeev
SilabRAT, What’s Your Power?
HijackLoader SnappyClient
2026-05-27 ⋅ Group-IB ⋅ Kuvonchbek Yorkulov, Yuan Huang
The GHOST STADIUM Score: Billions At Stake At The World’s Largest Football Tournament
GHOST STADIUM
2026-02-26 ⋅ Group-IB ⋅ Hans Figueroa, Vlada Govorova
GTFire Phishing Scheme: Avoiding Detection Using Google Services
GTFire
2025-08-27 ⋅ Group-IB ⋅ Nikita Rostovcev, Sergei Turner
ShadowSilk: A Cross-Border Binary Union for Data Exfiltration
Cobalt Strike YoroTrooper
2025-03-13 ⋅ Group-IB ⋅ Group-IB
ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims
Emmenhtal Lumma Stealer
2025-02-20 ⋅ Group-IB ⋅ Dmitrii Yankelevich, Dmitry Pisarev, Pavel Naumov
Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters
ScreamedJungle
2025-02-12 ⋅ Group-IB ⋅ Mahmoud Zohdy, Nam Le Phuong, Vito Alfano
RansomHub Never Sleeps Episode 1: The evolution of modern ransomware
RansomHub
2025-01-28 ⋅ Group-IB ⋅ Nikolay Kichatov, Pietro Albuquerque, Sharmine Low
Cat’s out of the bag: Lynx Ransomware-as-a-Service
Lynx
2024-09-25 ⋅ Group-IB ⋅ Group-IB
Inside the Dragon: DragonForce Ransomware Group
DEVMAN
2024-09-18 ⋅ Group-IB ⋅ Nam Le Phuong, Vito Alfano
Storm clouds on the horizon: Resurgence of TeamTNT?
TeamTNT
2024-09-04 ⋅ Group-IB ⋅ Sharmine Low
APT Lazarus: Eager Crypto Beavers, Video calls and Games
BeaverTail BeaverTail InvisibleFerret Beavertail
2024-06-26 ⋅ Group-IB ⋅ Group-IB
Craxs Rat, the master tool behind fake app scams and banking fraud
CraxsRAT SpyMax SpyNote
2024-06-21 ⋅ Group-IB ⋅ Group-IB
Boolka Unveiled: From web attacks to modular malware
BMANAGER Boolka
2024-02-06 ⋅ Group-IB ⋅ Threat Intelligence
Dead-end job: ResumeLooters gang infects websites with XSS scripts and SQL injections to vacuum up job seekers' personal data and CVs
ResumeLooters
2023-12-07 ⋅ Group-IB ⋅ Sharmine Low
Curse of the Krasue: New Linux Remote Access Trojan targets Thailand
Krasue RAT
2023-10-05 ⋅ Group-IB ⋅ Group-IB
Let's dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix
GoldDigger
2023-08-14 ⋅ Group-IB ⋅ Artem Grischenko, Pavel Naumov
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Gigabud
2023-05-31 ⋅ Group-IB ⋅ Andrey Polovinkin
Dark Pink. Episode 2
TelePowerBot DarkPink
2023-05-17 ⋅ Group-IB ⋅ Joshua Penny, Nikita Rostovtsev, Yashraj Solanki
The distinctive rattle of APT SideWinder
SideWinder