Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-12-14 ⋅ Group-IB ⋅ Nikita Rostovcev
Ace in the Hole: exposing GambleForce, an SQL injection gang
Cobalt Strike GambleForce
2023-12-07 ⋅ Group-IB ⋅ Sharmine Low
Curse of the Krasue: New Linux Remote Access Trojan targets Thailand
Krasue RAT
2023-10-05 ⋅ Group-IB ⋅ Group-IB
Let's dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix
GoldDigger
2023-09-26 ⋅ Group-IB ⋅ Eline Switzer, Joshua Penny, Michael Koczwara
Dusting for fingerprints: ShadowSyndicate, a new RaaS player?
ShadowSyndicate
2023-08-14 ⋅ Group-IB ⋅ Artem Grischenko, Pavel Naumov
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Gigabud
2023-05-31 ⋅ Group-IB ⋅ Andrey Polovinkin
Dark Pink. Episode 2
TelePowerBot DarkPink
2023-05-17 ⋅ Group-IB ⋅ Joshua Penny, Nikita Rostovtsev, Yashraj Solanki
The distinctive rattle of APT SideWinder
SideWinder
2023-04-04 ⋅ Group-IB ⋅ Andrey Zhdanov, Vladislav Azersky
The old way: BabLock, new ransomware quietly cruising around Europe, Middle East, and Asia
Rorschach Ransomware
2023-03-31 ⋅ Group-IB ⋅ Group-IB
36gate: supply chain attack
3CX Backdoor
2023-01-11 ⋅ Group-IB ⋅ Andrey Polovinkin
Dark Pink
TelePowerBot DarkPink
2023-01-11 ⋅ Group-IB ⋅ Group-IB
Dark Pink: New APT group targets governmental, military organizations in APAC, Europe
TelePowerBot
2023-01-11 ⋅ Group-IB ⋅ Andrey Polovinkin
Dark Pink - New APT hitting Asia-Pacific, Europe that goes deeper and darker
2022-12-21 ⋅ Group-IB ⋅ Artem Grischenko
Godfather: A banking Trojan that is impossible to refuse
Godfather
2022-11-03 ⋅ Group-IB ⋅ Rustam Mirkasymov
Financially motivated, dangerously activated: OPERA1ER APT in Africa
Cobalt Strike Common Raven
2022-11-03 ⋅ Group-IB ⋅ Group-IB
OPERA1ER: Playing god without permission
2022-09-16 ⋅ Group-IB ⋅ Twitter (@GroupIB_GIB)
Tweet on Uber Employees potentially infected with Raccoon and Vidar stealer
Raccoon Vidar
2022-08-25 ⋅ Group-IB ⋅ Roberto Martinez, Rustam Mirkasymov
Roasting 0ktapus: The phishing campaign going after Okta identity credentials
2022-08-18 ⋅ Group-IB ⋅ Nikita Rostovtsev
APT41 World Tour 2021 on a tight schedule
Cobalt Strike
2022-08-17 ⋅ Group-IB ⋅ Victor Okorokov
Switching side jobs Links between ATMZOW JS-sniffer and Hancitor
Hancitor
2022-08-11 ⋅ Group-IB ⋅ Group-IB
Challenge accepted Detecting MaliBot, a fresh Android banking trojan, with a Fraud Protection solution