Group-IB

New Android malware RemControl steals banking PINs and blocks removal attempts

Android, cybercrime, Don't miss, financial industry, Group-IB, Hot stuff, Malware, mobile security, News, online banking /

New Android malware RemControl steals banking PINs and blocks removal attempts 2026-09-24 at 12:40 By Sinisa Markovic A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than […]

New Android malware RemControl steals banking PINs and blocks removal attempts Read More »

New Android malware relays bank cards to fraudsters while victims still hold them

Android, fraud, Group-IB, Malware, News, scams, social engineering /

New Android malware relays bank cards to fraudsters while victims still hold them 2026-08-14 at 14:08 By Sinisa Markovic Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access […]

New Android malware relays bank cards to fraudsters while victims still hold them Read More »

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

cyber espionage, Group-IB, Iran, Malware, Microsoft 365, News /

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel 2026-07-20 at 20:20 By Sinisa Markovic Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB […]

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Read More »

A single typo could derail your World Cup plans

cybercrime, FBI, Flashpoint, Group-IB, News, scams /

A single typo could derail your World Cup plans 2026-05-28 at 12:42 By Sinisa Markovic Cybercriminals are spoofing Fédération Internationale de Football Association (FIFA) websites ahead of the 2026 FIFA World Cup, the FBI warns. The attackers are registering lookalike domains with small spelling changes or different domain endings to impersonate FIFA websites and services. […]

A single typo could derail your World Cup plans Read More »

45,000 malicious IP addresses taken down, 94 suspects arrested

cybercrime, Group-IB, Interpol, law enforcement, News, S2W, scams, Trend Micro /

45,000 malicious IP addresses taken down, 94 suspects arrested 2026-03-16 at 10:33 By Sinisa Markovic An international law enforcement operation has taken down more than 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware activity. The action was carried out as part of Operation Synergia III, an investigation that ran from July […]

45,000 malicious IP addresses taken down, 94 suspects arrested Read More »

One-time SMS links that never expire are exposing personal data for years

data security, Don't miss, Features, Group-IB, News, Palo Alto Networks, Privacy, Proofpoint, research, Sekoia.io /

One-time SMS links that never expire are exposing personal data for years 2026-01-23 at 08:47 By Sinisa Markovic Online services often treat one-time links sent by text message as low-risk conveniences. A new study shows that these links can expose large amounts of personal data for years. Malicious URLs continue to shift from email to […]

One-time SMS links that never expire are exposing personal data for years Read More »

Biometric spoofing isn’t as complex as it sounds

biometrics, cybersecurity, Group-IB, iProov, News, Ping Identity, Solaris, spoofing /

Biometric spoofing isn’t as complex as it sounds 2025-10-01 at 08:04 By Sinisa Markovic Biometric technologies were originally designed to improve security and streamline authentication, but they’re often misused in ways most people don’t notice. Like any system, biometrics has weaknesses that attackers can exploit. Biometric spoofing isn’t as complex as it sounds. It’s basically […]

Biometric spoofing isn’t as complex as it sounds Read More »

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains

arrest, cybercrime, Don't miss, Government, Group-IB, Interpol, Kaspersky, law enforcement, News, Trend Micro /

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains 2025-06-11 at 20:46 By Help Net Security More than 20,000 malicious IP addresses and domains used by information-stealing malware were taken down during an international cybercrime crackdown led by INTERPOL. Called Operation Secure, the effort ran from January to April 2025 and involved law […]

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains Read More »

Group-IB partners with SecurityHQ to enhance SOC capabilities

Group-IB, Industry news, SecurityHQ /

Group-IB partners with SecurityHQ to enhance SOC capabilities 2024-08-19 at 11:31 By Industry News Group-IB announced the signing of a global partnership agreement with SecurityHQ, a global independent Managed Security Service Provider (MSSP). With this partnership, SecurityHQ will leverage Group-IB’s Threat Intelligence, Attack Surface Management and Digital Risk Protection to bolster its global Security Operation […]

Group-IB partners with SecurityHQ to enhance SOC capabilities Read More »

Ransomware statistics that reveal alarming rate of cyber extortion

Arctic Wolf Networks, Cohesity, Corvus Insurance, Delinea, Don't miss, Group-IB, GuidePoint Security, Hot stuff, IBM, Malwarebytes, News, NTT Security, Ransomware, report, Rubrik, Sophos, survey, Veeam Software /

Ransomware statistics that reveal alarming rate of cyber extortion 2024-05-15 at 07:01 By Help Net Security In this article, you will find excerpts from various reports that offer statistics and insights about the current ransomware landscape. Global ransomware crisis worsens NTT Security Holdings | 2024 Global Threat Intelligence Report | May 2024 Ransomware and extortion […]

Ransomware statistics that reveal alarming rate of cyber extortion Read More »

25 cybersecurity AI stats you should know

Accenture, Artificial Intelligence, Cisco, Cloud Security Alliance, Code42, cybercrime, cybersecurity, Don't miss, Dynatrace, FS-ISAC, Google Cloud, Group-IB, HiddenLayer, Hot stuff, ISC2, LastPass, McAfee, Netskope, News, report, survey, Zscaler /

25 cybersecurity AI stats you should know 2024-04-25 at 06:31 By Help Net Security In this article, you will find excerpts from reports we recently covered, which offer stats and insights into the challenges and cybersecurity issues arising from the expansion of AI. Security pros are cautiously optimistic about AI Cloud Security Alliance and Google […]

25 cybersecurity AI stats you should know Read More »

Cybercriminals harness AI for new era of malware development

APT, Artificial Intelligence, cybercriminals, cybersecurity, dark web, Data leak, Group-IB, Malware, News, Ransomware, report, social engineering /

Cybercriminals harness AI for new era of malware development 2024-03-01 at 08:31 By Help Net Security The alliance between ransomware groups and initial access brokers (IABs) is still the powerful engine for cybercriminal industry, as evidenced by the 74% year-on-year increase in the number of companies that had their data uploaded on dedicated leak sites […]

Cybercriminals harness AI for new era of malware development Read More »

iOS users beware: GoldPickaxe trojan steals your facial data

China, cybercrime, cybercriminals, cybersecurity, Don't miss, Group-IB, iOS, iPhone, Malware, News, smartphones, trojan /

iOS users beware: GoldPickaxe trojan steals your facial data 2024-02-15 at 12:16 By Help Net Security Group-IB uncovered a new iOS trojan designed to steal users’ facial recognition data, identity documents, and intercept SMS. The trojan, dubbed GoldPickaxe.iOS by Group-IB’s Threat Intelligence unit, has been attributed to a Chinese-speaking threat actor codenamed GoldFactory, responsible for […]

iOS users beware: GoldPickaxe trojan steals your facial data Read More »

ResumeLooters target job search sites in extensive data heist

cybercrime, cybersecurity, Group-IB, News, security assessment, SQL injection, XSS /

ResumeLooters target job search sites in extensive data heist 2024-02-06 at 12:47 By Help Net Security Group-IB identified a large-scale malicious campaign primarily targeting job search and retail websites of companies in the Asia-Pacific region. The group, dubbed ResumeLooters, successfully infected at least 65 websites between November and December 2023 through SQL injection and XSS […]

ResumeLooters target job search sites in extensive data heist Read More »

Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831)

0-day, cybercrime, Don't miss, Group-IB, Hot stuff, News, security update, Windows, WinRAR /

Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831) 23/08/2023 at 18:46 By Zeljka Zorz Financially-motivated attackers have exploited a zero-day vulnerability in WinRAR (CVE-2023-38831) to trick traders into installing malware that would allow them to steal money from broker accounts. “This vulnerability has been exploited since April 2023,” says Group-IB malware […]

Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831) Read More »

Growing scam activity linked to social media and automation

cybercrime, cybercriminals, Group-IB, News, phishing, report, scams /

Growing scam activity linked to social media and automation 17/07/2023 at 06:02 By Help Net Security The average number of scam resources created per brand across all regions and industries more than doubled year-on-year in 2022, up 162%, according to Group-IB. Additionally, the total number of scam pages detected by Group-IB in 2022 was more […]

Growing scam activity linked to social media and automation Read More »

Compromised ChatGPT accounts garner rapid dark web popularity

ChatGPT, credentials, dark web, Don't miss, Group-IB, News, report, Threat Intelligence /

Compromised ChatGPT accounts garner rapid dark web popularity 21/06/2023 at 09:06 By Help Net Security Compromised credentials were found within the logs of info-stealing malware traded on illicit dark web marketplaces over the past year, according to Group-IB. The number of available logs containing compromised ChatGPT accounts reached a peak of 26,802 in May 2023. […]

Compromised ChatGPT accounts garner rapid dark web popularity Read More »

Phishing campaigns thrive as evasive tactics outsmart conventional detection

cybercrime, cybercriminals, data, Email, Group-IB, News, phishing, report, scams /

Phishing campaigns thrive as evasive tactics outsmart conventional detection 01/06/2023 at 06:21 By Help Net Security A 25% increase in the use of phishing kits has been recorded in 2022, according to Group-IB. The key phishing trends observed are the increasing use of access control and advanced detection evasion techniques. The rise in evasive tactics, […]

Phishing campaigns thrive as evasive tactics outsmart conventional detection Read More »

Scroll to Top