#cybersecurity #AiteNovarica

We are proud to announce that Group-IB has been named the largest and most experienced Incident Response Retainer (IRR) provider in Aite-Novarica’s recent Impact Report on IRR market players.

Group-IB’s IRR program is based on the company’s track record in responding to cyber incidents for 19 years, involving over 1,300 investigations across 60 countries, and racking up 70,000 hours of hands-on IR experience. According to the Aite-Novarica report, this experience makes Group-IB an outlier seven times over. Group-IB has over 150 active retainer clients, including the top 30 largest banks and financial services firms globally.

Check out the report to learn more👈

#webinar

Imagine a huge wave of phishing emails hit your company. How can you be sure that no one opened malicious attachments or links? And what would be the consequences if this happened?

Detonation is the answer. Join our webinar "Having doubts? Detonate! Malware detonation use cases", where we will discuss the preparation of detonation environment, advantages and ways to use detonation in real practice.

Save the date: September 13 at 11 AM (GMT+1) / 2 PM (GMT + 4)

Register 👈

#phishing #Steam #CERT

Fraudsters have been creating hundreds of phishing resources mimicking Steam online gaming platform, but most of these websites looked half-baked and users easily spotted a fake.

A new threat emerged out of nowhere, and its name was browser-in-the-browser. Using the browser-in-the-browser phishing technique, hackers create a fake browser window on a phishing resource, which at first glance is indistinguishable from the authentic one. Threat actors decided to take advantage of the fact that Steam uses a pop-up window for user authentication instead of a new tab.

Since browser-in-the-browser technology poses a significant risk to users, Group-IB CERT-GIB specialists decided to analyze it in detail using an example of a phishing kit located on a resource that mimics Steam. Check out our new blog post👈

#Uber #breach

Group-IB researchers have found some interesting information about the recent Uber hack. Check out our post on Medium for more details👈

#AttackSurfaceManagement #ASM

Imagine the following situation. In 2016, a marketing specialist makes an urgent request to the IT department to create a landing page with the domain name “promotionforthisproduct2016[.]com” in order to promote a product. The domain was created and soon thereafter the promotion ended. A year goes by and the IT specialist leaves the company. Two years later, the marketing specialist follows suit. In 2020, the company hires a new Chief Security Officer who is not told anything about the domain or the potentially vulnerable infrastructure that hosts it.

As people say, the Internet remembers everything — and not just the photos of Beyoncé or Barbra Streisand’s house, but any external IT assets that companies create. Assets can also be seen by threat actors, who can use vulnerabilities and weaknesses to carry out attacks.

Group-IB Attack Surface Management maps out the organization’s entire external attack surface, with an eye towards discovering shadow IT and other hidden risks. Check out our latest blog post to learn more about the solution👈

#report #banks #AttackSurfaceManagement

🏦Banks and other financial service providers are highly digitized, resulting in digital estates that are large and complex. At the same time, the global finance industry faces a hostile threat landscape. These factors lead to high levels of risk that can be difficult to manage.

To help security professionals gain a better view on industry-wide risk trends, Group-IB has created a series of reports that analyze the digital estates and attack surfaces of samples of financial services providers across 3 global regions: Latin America, Europe, and the Asia-Pacific region.

The reports provide insights on the size of the average digital footprint, risk assessments across 8 distinct issue categories, and data-driven recommendations for strengthening security posture.

Download now👈