Click here to download all references as Bib-File.•
| 2026-10-21
⋅
Group-IB
⋅
Stray Cat, Open Doors: How k0t Wanders Through the Network Edge AdaptixC2 MimiKatz k0t |
| 2026-08-31
⋅
Group-IB
⋅
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem bancos Ousaban Warsaw Exilware |
| 2026-07-23
⋅
Group-IB
⋅
JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake AdaptixC2 reGeorg |
| 2026-06-10
⋅
Group-IB
⋅
SilabRAT, What’s Your Power? HijackLoader SnappyClient |
| 2026-05-27
⋅
Group-IB
⋅
The GHOST STADIUM Score: Billions At Stake At The World’s Largest Football Tournament GHOST STADIUM |
| 2026-02-26
⋅
Group-IB
⋅
GTFire Phishing Scheme: Avoiding Detection Using Google Services GTFire |
| 2026-01-07
⋅
Group-IB
⋅
Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware |
| 2025-12-03
⋅
Group-IB
⋅
Hook for Gold: Inside GoldFactory’s Сampaign That Turns Apps Into Goldmines Gigabud Remo |
| 2025-08-27
⋅
Group-IB
⋅
ShadowSilk: A Cross-Border Binary Union for Data Exfiltration Cobalt Strike YoroTrooper |
| 2025-03-13
⋅
Group-IB
⋅
ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims Emmenhtal Lumma Stealer |
| 2025-02-20
⋅
Group-IB
⋅
Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters ScreamedJungle |
| 2025-02-12
⋅
Group-IB
⋅
RansomHub Never Sleeps Episode 1: The evolution of modern ransomware RansomHub |
| 2025-01-28
⋅
Group-IB
⋅
Cat’s out of the bag: Lynx Ransomware-as-a-Service Lynx |
| 2024-09-25
⋅
Group-IB
⋅
Inside the Dragon: DragonForce Ransomware Group DEVMAN |
| 2024-09-18
⋅
Group-IB
⋅
Storm clouds on the horizon: Resurgence of TeamTNT? TeamTNT |
| 2024-09-04
⋅
Group-IB
⋅
APT Lazarus: Eager Crypto Beavers, Video calls and Games BeaverTail BeaverTail InvisibleFerret Beavertail |
| 2024-06-26
⋅
Group-IB
⋅
Craxs Rat, the master tool behind fake app scams and banking fraud CraxsRAT SpyMax SpyNote |
| 2024-06-21
⋅
Group-IB
⋅
Boolka Unveiled: From web attacks to modular malware BMANAGER Boolka |
| 2024-02-15
⋅
Group-IB
⋅
Face Off: Group-IB identifies first iOS trojan stealing facial recognition data Gigabud GoldDigger GoldFactory |
| 2024-02-06
⋅
Group-IB
⋅
Dead-end job: ResumeLooters gang infects websites with XSS scripts and SQL injections to vacuum up job seekers' personal data and CVs ResumeLooters |