ThreatVectr
Tag

#group-ib

9 stories taggedgroup-ib.

Full-frame edge-to-edge 16:9 photoreal news-editorial image of a generic Android-style smartphone face-up on a dark desk, screen glowing faintly with abstract g
Threat Intelligence

SpyNote and WindRelay: the Android malware combo that empties bank accounts over a single phone call

Group-IB documents a 13-minute attack chain that installs a remote-access tool, takes out a loan, then relays the victim's contactless card to a criminal at a real payment terminal.

4 min read
Photoreal editorial image, 16:9, full-frame edge to edge
Threat Intelligence

Leaky Alibaba Cloud Server Exposes China-Linked Spying Kit Aimed at Hospitals and Governments

Researchers at Group-IB stumbled on a misconfigured server in Singapore that revealed a new Windows loader, TriBack, used against targets across Asia and Latin America.

4 min read
Full-frame 16:9 photoreal editorial shot of a dimly lit server room with one rack door left ajar, faint blue LED glow spilling out onto a concrete floor, cables
Threat Intelligence

HollowGraph Malware Hides Spy Commands Inside Microsoft 365 Calendar Entries

A newly identified piece of malware turns ordinary calendar appointments into a covert messaging system, letting criminals send instructions and steal files without ever touching a suspicious server.

3 min read
Photoreal news-editorial image, 16:9, full-frame edge-to-edge
Threat Intelligence

HollowGraph: The Spyware That Hides Its Orders in a Fake 2050 Calendar Invite

Researchers at Group-IB link the covert Microsoft 365 tool to Iran-nexus activity targeting Israeli organisations, with medium confidence.

4 min read
Full-frame photoreal news-editorial image of a dimly lit office desk at night, a laptop screen glowing with a blurred calendar grid showing dates far in the fut
Threat Intelligence

HollowGraph Spies Hide Their Orders in Fake Calendar Events Dated 2050

A newly named espionage tool turns Microsoft 365 calendars into a secret mailbox, tucking instructions and stolen files into meetings set decades in the future.

3 min read
Photoreal editorial shot of a modern silver laptop on a dark wooden desk, screen showing a generic blurred password prompt box glowing against an otherwise blac
Threat Intelligence

ClickLock: the Mac malware that locks up your screen until you type your password

A new macOS stealer, tracked by Group-IB, freezes everything on the screen except a password box. It has already hit around 100 machines in 33 countries.

4 min read
Photoreal editorial 16:9 image of a darkened developer workstation with a MacBook open to a terminal window, blurred cryptocurrency price tickers reflected in t
Threat Intelligence

ClickLock Stealer Tricks Mac Users Into Handing Over Their Own Passwords

A newly discovered piece of Mac malware skips the usual hacking tricks and simply persuades victims to run it themselves, then locks the screen until they surrender their passwords.

3 min read
Full-frame overhead photoreal shot of a modern Android smartphone lying on a dark matte desk, screen glowing with an abstract developer settings interface, fain
Threat Intelligence

RedHook Android Malware Turns Phones Into Their Own Debugging Tool

A new build of the RedHook trojan tricks Android users into switching on Wireless Debugging, then quietly promotes itself to a privilege level normal apps can never reach.

4 min read
Threat Intelligence

Facebook Impersonation Scams Sweep MENA, Pushing Fake Subsidies and 'Free Data' Lures

Group-IB ties the campaign to a broader fraud network using cloned political figures, fake government programs and browser-push alerts to harvest credentials and payment data.

2 min read
© 2026 Threat Vectr