#groupib — Public Fediverse posts

Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts

Indicators extracted from public reporting. Source: https://www.group-ib.com/blog/balonx-sistema-mexico-phaas/

Pulse ID: 6a85c43554b382dba75c54b7
Pulse Link: https://otx.alienvault.com/pulse/6a85c43554b382dba75c54b7
Pulse Author: CyberHunter_NL
Created: 2026-08-19 14:56:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Bank #CyberSecurity #GroupIB #HTTP #HTTPS #InfoSec #MFA #Mexico #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme

A new NFC relay malware family called WindRelay has been discovered operating in combination with SpyNote RAT to enable sophisticated contactless payment fraud. The scheme uses live social engineering phone calls where fraudsters impersonate bank employees and guide victims to install personalized RAT malware labeled with the victim's own name. Once installed, the RAT enables silent deployment of WindRelay, which captures contactless payment card data via NFC when victims tap their cards to their phones. The captured data is relayed in real-time to fraudster-controlled terminals for immediate cash-out through physical purchases or ATM withdrawals. The operation employs dual monetization, combining RAT-driven digital loan fraud with NFC-based card-present transactions. Group-IB identified 23 WindRelay samples targeting victims in Czechia, Slovakia, and Slovenia between November 2025 and July 2026.

Pulse ID: 6a7c6340682f0dc9b225d8d6
Pulse Link: https://otx.alienvault.com/pulse/6a7c6340682f0dc9b225d8d6
Pulse Author: AlienVault
Created: 2026-08-12 12:12:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Bank #CyberSecurity #GroupIB #InfoSec #Malware #OTX #OpenThreatExchange #RAT #Slovenia #SocialEngineering #SpyNote #Troll #bot #AlienVault

13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts

Indicators extracted from public reporting. Source: https://www.group-ib.com/blog/windrelay-nfc-spynote-rat-combo-fraud/

Pulse ID: 6a7c6d65bad96416b5bbfbd3
Pulse Link: https://otx.alienvault.com/pulse/6a7c6d65bad96416b5bbfbd3
Pulse Author: CyberHunter_NL
Created: 2026-08-12 12:56:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #GroupIB #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RCE #SpyNote #bot #CyberHunter_NL

XMRig Covert Ops: The Cryptomining Campaign That Abuses Trusted Access and Deploys Forensic Smokescreens | Group-IB Blog

Join the Cybercrime Fighters Club, a group of professionals dedicated to combat cybercrime and other forms of cyber-crime. £1.5m in funding, research, development and training.

Pulse ID: 6a6b19baacfdff5ea7386d10
Pulse Link: https://otx.alienvault.com/pulse/6a6b19baacfdff5ea7386d10
Pulse Author: CyberHunter_NL
Created: 2026-07-30 09:30:34

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CryptoMining #CyberCrime #CyberSecurity #GroupIB #InfoSec #OTX #OpenThreatExchange #Rust #bot #CyberHunter_NL

JadeProx: il cluster cinese che si è tradito da solo mentre colpiva ospedali, ministeri e università in Asia

https://insicurezzadigitale.com/jadeprox-il-cluster-cinese-che-si-e-tradito-da-solo-mentre-colpiva-ospedali-ministeri-e-universita-in-asia/

HollowGraph: la backdoor che trasforma il calendario di Microsoft 365 in un canale C2 cifrato

https://insicurezzadigitale.com/hollowgraph-la-backdoor-che-trasforma-il-calendario-di-microsoft-365-in-un-canale-c2-cifrato/

Police Bust GXC Team, One of the Most Active Cybercrime Networks https://hackread.com/police-bust-gxc-team-cybercrime-networks/ #Cybersecurity #GoogleXcoder #CyberCrime #Phishing #GroupIB #GXCTeam #Police #Fraud #Spain #Scam

🚔 Spanish police have busted the GXC Team, one of the most active cybercrime networks led by #GoogleXcoder, a 25-year-old Brazilian.

Read: https://hackread.com/police-bust-gxc-team-cybercrime-networks/

#Cybercrime #CyberSecurity #Infosec #GXC #GroupIB #Spain #Brazil

Biometric spoofing isn’t as complex as it sounds https://www.helpnetsecurity.com/2025/10/01/biometric-spoofing/ #cybersecurity #PingIdentity #biometrics #spoofing #GroupIB #Solaris #iProov #News

Четыре года делу Сачкова: конфликт глобальной профессии и локального долга в кибербезопасности

29 сентября исполнится четыре года со дня ареста Ильи Сачкова. Вроде бы споры вокруг этой истории поутихли, но каждый раз, когда речь заходит о ней в профессиональном кругу, тема оживает и вызывает живой отклик. Слишком много неясного и противоречивого, слишком серьёзные вопросы затронуты. Для меня это стало поводом взглянуть шире: не только на само дело, но и на ту этическую ловушку, в которую попадают специалисты по кибербезопасности. Как честно работать в глобальном сообществе, при этом оставаясь гражданами конкретной страны, со своими законами и ограничениями? Где искать баланс? Какие ориентиры появятся в ближайшем будущем — и что нам даёт новый международный Code of Professional Conduct от ISC2?

https://habr.com/ru/articles/948938/

#сачков #groupib #кибербезопасность #этика #cpc #цифровой_суверенитет #законодательство

Firewalls umgangen: Hacker infiltrieren Netzwerk einer #Bank per #RaspberryPi

https://www.golem.de/news/firewalls-umgangen-hacker-infiltrieren-netzwerk-einer-bank-per-raspberry-pi-2507-198674.html

#GroupIB #UNC2891

In search of riches, #hackers plant 4G-enabled #RaspberryPi in bank network

The researchers with security firm Group-IB said the “unprecedented tactic allowed the attackers to bypass perimeter defenses entirely.” The hackers combined the physical #intrusion with remote access #malware that used another novel technique to conceal itself, even from sophisticated #forensic tools.
#4g #security #privacy #GroupIB

https://arstechnica.com/security/2025/07/in-search-of-riches-hackers-plant-4g-enabled-raspberry-pi-in-bank-network/

Operation Secure: INTERPOL Disrupts 20,000 Infostealer Domains, 32 Arrested https://hackread.com/operation-secure-interpol-disrupts-infostealer-domains/ #Vulnerability #Infostealer #CyberCrime #trendmicro #Kaspersky #Security #Interpol #Malware #GroupIB

Operation Secure: INTERPOL Disrupts 20,000 Infostealer Domains, 32 Arrested – Source:hackread.com https://ciso2ciso.com/operation-secure-interpol-disrupts-20000-infostealer-domains-32-arrested-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #Vulnerability #Infostealer #CyberCrime #trendmicro #Kaspersky #Hackread #Interpol #security #GroupIB #malware

Alleged ‘Scattered Spider’ Member Extradited to U.S. https://krebsonsecurity.com/2025/04/alleged-scattered-spider-member-extradited-to-u-s/ #TylerRobertBuchanan #Ne'er-Do-WellNews #ALittleSunshine #ScatteredSpider #AhmedElbadawy #SIMSwapping #EvansOsiebo #SIMswapping #Ransomware #ransomware #JoelEvans #Mailchimp #NoahUrban #DoorDash #lastpass #0ktapus #Caesars #GroupIB #Twilio #Tylerb #Okta #MGM

INTERPOL Arrests 1,000 and Dismantles Cybercrime Networks Across Africa https://hackread.com/interpol-arrest-dismantle-cybercrime-networks-africa/ #Cybersecurity #PigButchering #CyberCrime #Cybercrime #Security #Interpol #DarkWeb #GroupIB #Africa #AFRIPO #Scam

📬 iServer: Phishing-Dienst-Abschaltung folgten 17 Festnahmen
#DarkCommerce #DmitriVolkow #europol #GroupIB #iServer #OperationKaerb #PhishingasaService https://sc.tarnkappe.info/55a9fc

In 2024, a group known as DarkCasino emerged as a cyber threat entity. This group has been linked to exploiting a vulnerability in WinRAR, specifically identified as CVE 2023 38831. DarkCasino has been using this security loophole to carry out phishing attacks targeting users in industries such as casinos, financial services, and government sectors across countries. Their strategy involves sending emails containing manipulated archives to distribute malicious software and gather sensitive information.

DarkCasino, while sharing similarities with other cyber threat groups, stands out for its sophisticated techniques and primarily financial motivation. Their use of Visual Basic-based Trojan horse programs is a testament to their advanced capabilities. Their activities underscore the ever-evolving landscape of risks and the critical need for robust cybersecurity measures. Ongoing surveillance and analysis by cybersecurity firms like NSFOCUS and Group IB have provided insights into DarkCasino's operations, but many specifics regarding their targets and the complete extent of their actions remain undisclosed, adding to the complexity of the challenge.

#DarkCasino #APT #CyberSecurity #WinRAR #ZeroDay #PhishingAttacks #CyberThreats #DataExfiltration #Malware #AdvancedThreats #VisualBasic #TrojanHorse #FinancialServices #GovernmentSecurity #NSFOCUS #GroupIB #CyberEspionage #ThreatDetection #InformationSecurity #EconomicMotivation

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested https://krebsonsecurity.com/2024/06/alleged-boss-of-scattered-spider-hacking-group-arrested/ #NoahMichaelUrban #ScatteredSpider #NeerDoWellNews #TylerBuchanan #VXUnderground #DataBreaches #SIMSwapping #MurciaToday #SIMswapping #WebFraud20 #Mailchimp #DoorDash #lastpass #0ktapus #Caesars #GroupIB #KingBob #signal #TheCom #Okta #Sosa #fbi #MGM

25 cybersecurity AI stats you should know https://www.helpnetsecurity.com/2024/04/25/cybersecurity-ai-stats/ #artificialintelligence #CloudSecurityAlliance #cybersecurity #GoogleCloud #HiddenLayer #cybercrime #Don'tmiss #Accenture #Dynatrace #Hotstuff #LastPass #Netskope #GroupIB #Zscaler #Code42 #FSISAC #McAfee #report #survey #Cisco #News #ISC2

iOS users beware: GoldPickaxe trojan steals your facial data https://www.helpnetsecurity.com/2024/02/15/goldpickaxe-ios-trojan/ #cybercriminals #cybersecurity #smartphones #cybercrime #Don'tmiss #GroupIB #malware #iPhone #trojan #China #News #iOS

U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

https://krebsonsecurity.com/2023/02/u-s-u-k-sanction-7-men-tied-to-trickbot-hacking-group/

#USDepartmentofTreasury #Vitaly"Bentley"Kovalev #ChristinaSvechinskaya #ALittleSunshine #SergeyMikhaylov #NeerDoWellNews #RuslanStoyanov #KasperskyLab #WizardSpider #CrowdStrike #IlyaSachkov #Ransomware #AdamMeyers #trickbot #GroupIB #Dyre

📬 Godfather: BaFin warnt vor Malware-Angriffen auf Krypto-Apps
#Hacking #Malware #BundesanstaltfürFinanzdienstleistungsaufsichtBaFin #Godfather #GroupIB #KryptoApps #Trojaner https://tarnkappe.info/artikel/malware/godfather-bafin-warnt-vor-malware-angriffen-auf-krypto-apps-262953.html

A new advanced threat actor known as #DarkPink, also referred to as #Saaiwc Group, has been found to be targeting government agencies and military bodies in multiple countries in the #APAC region using custom malware to steal confidential information. #GroupIB #cybersecurity #APT https://andreafortuna.org/2023/01/11/new-dark-pink-apt-group-targets-governmental-and-military-organizations?utm_source=dlvr.it&utm_medium=mastodon