Group-IB
2.19K subscribers
739 photos
26 videos
2 files
525 links
Your daily source of cybersecurity news brought to you by Group-IB, one of the global industry leaders.
Download Telegram
#interpol #phishing #fraud #carding
Group-IB has supported INTERPOL in its Lyrebird operation that resulted in the identification and apprehension of a threat actor presumably responsible for multiple attacks worldwide.

👥 According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

⚔️ The alleged perpetrator, who turned out to be a citizen of Morocco, was arrested in May by the Moroccan police based on the data about his cybercrimes that was provided by Group-IB.

🧑‍💻 The starting point of Group-IB’s research to identify and deanonymize the cybercriminal was the extraction of a phishing kit (a tool used to create phishing web pages) exploiting the brand of a large French bank by Group-IB’s Threat Intelligence & Attribution system.

🔁 The set-up of the detected phishing kit followed a common technique, with the creation of a spoofed website of a targeted company, the mass distribution of emails impersonating it and asking users to enter login information on the spoofed site. The credentials left by unsuspecting victims on the fake page were then redirected to the perpetrator’s email. Almost each of the scripts contained in the phishing kit had its creator’s nickname, Dr HeX, and contact email address.

➡️ Curious to learn the details? Click here to read the full story!
#INTERPOL #Falcon #BEC

Operation Falcon II: Group-IB assists INTERPOL, Nigerian Police Force in action to apprehend 11 cybercriminals💥💥💥

Earlier in the day, INTERPOL made public the results of a 10-day operation by the Nigerian Police Force as a result of which 11 alleged members of a prolific cybercrime network were arrested. Many of the suspects arrested are thought to be members of TMT BEC gang (aka Silver Terrier).

Group-IB’s APAC Cyber Investigations Team has contributed to the operation by sharing information on the threat actors, having identified the attackers’ infrastructure, collected their digital traces and assembled data on their identities. Group-IB has also expanded the investigation’s evidence base by reverse engineering the samples of malware used by the cybercriminals and conducting the digital forensics analysis of the files contained on the devices seized from the suspects. The operation was also supported by Palo Alto Networks Unit 42👏

The first edition of Operation Falcon, a joint action by INTERPOL, Group-IB and Nigeria Police Force, was held in November 2020 and resulted in the apprehension of three alleged members of the TMT gang.

More details -> https://bit.ly/3KrJbJA
#INTERPOL #Delilah #BEC

🤝Operation Delilah: Group-IB helps INTERPOL nab suspected leader of transnational phishing ring.

As part of operation Delilah, Group-IB provided threat intelligence that led to the identification of the alleged head of a cybercrime syndicate that launched mass phishing campaigns and business email compromise (BEC) schemes targeting thousands of companies and individual victims. The arrest of a 37-year-old Nigerian man by the Nigeria Police Force marked the culmination of the year-long international operation coordinated and facilitated by the INTERPOL’s cybercrime directorate and supported by Group-IB, Palo Alto Networks, and Trend Micro.

Operation Delilah was preceded by INTERPOL-led Falcon I and Falcon II, carried out in 2020 and 2021 with the support of Group-IB’s Cyber Investigations Team. The two previous operations resulted in the arrest of 14 alleged members of TMT (aka SilverTerrier), a prolific BEC and phishing syndicate.

"The Delilah operation clearly demonstrates how effective cybersecurity can be when all parties are involved and motivated to protect people and companies," said Dmitry Volkov, Group-IB CEO. "We are proud to have leveraged our expertise to support another great effort aimed at disrupting cybercrime. Prompt threat intelligence sharing, private-public partnership, and effective multi-party coordination by INTERPOL’s Cybercrime Directorate were crucial to the success of the operation. We’ll continue our work to minimize the impact of cybercrime in line with Group-IB’s mission of fighting cybercrime and protecting our customers all around the world."

Click here for more details.
#cybersecurity #INTERPOL

Group-IB took part in INTERPOL's 9th Africa Working Group Meeting on cybercrime in Kigali, Rwanda.

Kristina Ivanova, Deputy Head of APAC High Tech Crime Investigation Department, provided an overview of threats within the African Region and discussed how Group-IB tracks down cybercrime in collaboration with INTERPOL and other law enforcement agencies.

We were honoured to receive an award from INTERPOL: Group-IB does its best to make the world a cyber safer place.
🔥10👍73
#FightAgainstCybercrime #Formula1 #Interpol

As part of the Interpol Major Event Support Team (IMEST), Group-IB Digital Risk Protection team contributed to the safety of the Formula 1 Singapore Airlines Singapore Grand Prix 2022.

Our experts identified more than 100 unauthorized instances of ticket sales on social media and local classified websites. The tickets were distributed through individual accounts and non-official groups. Group-IB experts also detected several rogue and scam websites impersonating Grand Prix Singapore. One of the scam websites on the screenshot attempted to trick users into a fake crypto investment scam.

Group-IB findings were promptly actioned by the INTERPOL-led IMEST.
🔥9
#INTERPOL #FightAgainstCybercrime

🤝 Group-IB has contributed to the INTERPOL-led Africa Cyber Surge Operation to combat cybercrime on continent.

The Africa Cyber Surge Operation, a multinational cybercrime suppression operation focused on identifying cybercriminals and compromised infrastructure, was launched in July 2022. The operation’s strategic goal was to enhance cooperation between African law enforcement agencies to prevent, mitigate, investigate, and pursue threat actors.

Several key results of the operation included:

▪️the arrest of 10 individuals linked to scam and fraud activities worth $800,000;

▪️the takedown by the authorities in Eritrea of a darknet market that was selling hacking tools;

▪️action taken against more than 200,000 pieces of malicious infrastructure that was facilitating cybercrime across Africa.

For this operation Group-IB collected information about malicious and phishing network infrastructure hosted within member countries in Africa. Group-IB investigators leveraged the company’s sector-leading Threat Intelligence to produce a detailed report along with recommendations for the member countries.

“The Africa Cyber Surge Operation is another example of how cybersecurity is most effective when international law enforcement, individual nations, and private sector partners cooperate to share best practices and take a proactive approach to stamping out cybercrime. Group-IB is fully committed to its zero-tolerance policy to cybercrime, and our recent participation in the Africa Cyber Surge Operation underscores our desire to collaborate with our law enforcement partners and share best practices and information on the latest cyber threats,” Dmitry Volkov, CEO at Group-IB, said.

Click here for more details👈
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥101
🤝 Group-IB has assisted in the INTERPOL-led Operation Nervone, aimed at successfully disrupting the operations of the cybercriminal syndicate OPERA1ER in French-speaking Africa.

Group-IB’s Threat Intelligence and High-Tech Crime Investigations units, which have tracked OPERA1ER for more than four years alongside Orange-CERT-CC, provided timely intelligence that uncovered the identity and potential location of a key member of the cybercriminal group, who was subsequently detained in Abidjan, Côte d'Ivoire.

The group managed to carry out more than 30 successful attacks against financial institutions, banks, mobile banking services, and telecommunications companies in Côte d'Ivoire, Mali, Burkina Faso, Benin, Cameroon, Bangladesh, Gabon, Niger, Nigeria, Paraguay, Senegal, Sierra Leone, Uganda, Togo, and Argentina between March 2018 and October 2022.

Want to learn more? Head over to our website👈

#INTERPOL #FightAgainstCybercrime
🔥18👍42👎2
🔎 Bringing down 16shop: Group-IB assists INTERPOL-led international operation

Group-IB has assisted in an INTERPOL-led operation aimed at disrupting the activities of 16shop, a notorious phishing-as-a-service platform on which phishing kits were sold. The successful operation led to the shutdown of 16shop and the arrest of the site’s operator and two facilitators.

Group-IB’s Cyber Investigations team in the APAC region supported the operation by analyzing the infrastructure used by the suspect and collecting their digital traces to ultimately establish their identity. Group-IB’s experts also helped to identify some victims in Indonesia.

Data collected by Group-IB indicates that more than 150,000 phishing domains were created using the phishing kits in question. The phishing kits sold on 16shop were utilized to target users in Germany, Japan, France, the USA, the UK, Thailand and other countries.

Want to find out more? Head over to the Group-IB website.

#Cybersecurity #INTERPOL #FightAgainstCybercrime
👍5🔥4
🌍Africa Cyber Surge II operation: Group-IB assists in crime-fighting initiative that leads to arrest of 14 suspected cybercriminals

Group-IB has played a key role in the INTERPOL-led Africa Cyber Surge II operation, a multinational collaborative initiative tasked with preventing, mitigating, and disrupting threat actors on the African continent.

Here’s the rundown of this successful crime-fighting program:

📌 Africa Cyber Surge II began in April 2023, bringing together INTERPOL, AFRIPOL, Group-IB, and other private sector companies to pool actionable intelligence on cyber extortion, phishing, business email compromise, and online scams.

📌 The Africa Cyber Surge II operation spanned 25 African countries, leading to the arrests of 14 suspected cybercriminals and the identification of more than 20,000 suspicious cyber networks linked to financial losses in excess of $40m

📌 Group-IB, a long-standing private sector partner of INTERPOL, collected and shared more than 1,000 indicators related to malicious infrastructure across Africa.

📌 INTERPOL member states in Africa leveraged Group-IB’s intelligence in several takedown operations.

Want to learn more? Head over to the Group-IB website.

#INTERPOL #FightAgainstCybercrime
🔥9👍5👏2🤔2
🌐 Fighting cybercrime together!

Group-IB played a pivotal role in Operation Synergia, a INTERPOL-led initiative across 50+ countries targeting cybercrime. Our experts identified over 500 phishing sites and 1,900+ malware IP addresses. Collaboration with law enforcement led to 31 arrests and the takedown of numerous C2 servers. Learn more in our press release.

#Cybersecurity #OperationSynergia #INTERPOL #phishing #ransomware #bankingmalware
6👍4🔥2
🤝 Group-IB and INTERPOL have extended their strategic partnership with the formalization of an agreement aimed at reducing the global impact of cybercrime. The signing ceremony took place in Singapore and was witnessed by Dmitry Volkov, Group-IB's CEO, and Stephen Kavanagh, INTERPOL’s Executive Director of Police Services.

This collaboration builds upon a series of successful joint anti-cybercrime operations throughout 2023 and solidifies our shared mission to fight against cybercrime on a global scale.

Learn more via our press release.

#Cybersecurity #Partnership #INTERPOL #FightAgainstCybercrime
👍7🔥4
🛡️Once again, Group-IB stepped to the fore in supporting INTERPOL with another crime-nabbing operation.

Curious about the details behind the Grandoreiro malware operation? Read our latest press release.

Group-IB Threat Intelligence and Cyber Investigation specialists excelled in assisting with malware investigations and analysis, which helped narrow down suspects linked to the organized crime group.

🎓"Disrupting the Grandoreiro malware operation reaffirms the ever-strong public-private dynamic in investigating and fighting cybercrime to protect local businesses and citizens.” - Group-IB's CEO, Dmitry Volkov.

Read his complete statement and discover more about the operation now!

#BankingMalware #Cybercrime #Investigation #INTERPOL #FightAgainstCybercrime
👍7🔥7
Last month, we detailed how we assisted INTERPOL and Brazilian authorities to disrupt the Grandoreiro banking trojan operation. This collaboration led to the arrest of five administrators across the Brazilian states of São Paulo, Santa Catarina, Pará, Goiás, and Mato Grosso.

Our APAC Head of Hi-Tech Investigations Department Vesta Matveeva just represented us in a collaborative meeting at INTERPOL headquarters alongside Brazilian law enforcement and other private sector partners. This meeting focused on strategizing the next steps in the ongoing Grandoreiro operation.

This successful case exemplifies the power of public-private cooperation in combating cyber threats, and Group-IB's unwavering commitment to supporting INTERPOL and law enforcement in safeguarding businesses and protecting citizens around the world from digital harm.

#BankingMalware #Cybercrime #Cybersecurity #FightAgainstCybercrime #Grandoreiro #INTERPOL #Investigation #OpGrandoreiro
🔥7👍3🥰1
We are delighted to have contributed to INTERPOL's "Operation Contender 2.0." which led to the arrest of two individuals by the Nigerian Police Force for their role in a romance scam that resulted in significant financial losses for a victim in Finland.

As an INTERPOL Gateway Partner, Group-IB provided vital intelligence that helped law enforcement pinpoint and apprehend these cybercriminals. Our ongoing support for Operation Contender 2.0 reflects our commitment to combating digital crime and protecting victims worldwide.

Read More

#INTERPOL #OperationContender #Cybercrime #DigitalCrime #Cybersecurity #LawEnforcement #VictimsRights #FightAgainstCybercrime
🔥11👍2
Group-IB joined forces with INTERPOL and law enforcement agencies alongside 95 countries to disrupt the surge of phishing, ransomware, and info-stealing malware. Through "Operation Synergia II," we identified over 2,500 IP addresses tied to phishing and 1,300+ IPs linked to malware across, resulting in the takedown of more than 22,000 malicious servers. In total, 22,000+ malicious servers were taken offline, and 41 suspects were arrested worldwide.

Highlights of this operation include:

📍 Hong Kong: 1,037 malicious servers taken offline.
📍 Mongolia: 21 house searches conducted, with 93 suspects identified.
📍 Estonia: 80GB+ of server data seized to analyze links to phishing and banking malware.

Our CEO, Dmitry Volkov, highlights the importance of global collaboration: "As an INTERPOL Gateway Partner, we firmly believe that closer collaboration between the public and private sector will not only tackle cybercrime in all its guises more effectively but also safeguard the information and data of users and businesses globally."

Read More

#CyberSecurity #GroupIB #OperationSynergia #CyberCrime #INTERPOL #Phishing #Ransomware #DigitalSafety
🔥14👍3
Group-IB provided critical investigative intelligence supporting INTERPOL's Operation Contender 3.0, a successful multinational cybercrime takedown across Africa. The operation resulted in the arrest of 260 suspects and the seizure of 1,235 electronic devices linked to 81 cybercriminal infrastructures.

These networks, involved in romance scams and sextortion schemes, caused nearly US$2.8 million in financial losses affecting 1,463 identified victims. Our collaboration with international law enforcement underscores a shared commitment to dismantling criminal operations that cause both financial devastation and profound psychological harm.

This operation highlights the critical importance of public-private partnerships in the ongoing fight against cybercrime.

Read the full press release for detailed insights.

#INTERPOL #OperationContender #RomanceScams #FightAgainstCybercrime
👍5🔥4😁1