In February 2021, an operator at a water treatment plant in Oldsmar, Florida watched the cursor on his screen move on its own. Someone had logged into the plant's control system through TeamViewer, remote access software that staff had stopped using six months earlier but never removed. The...
In 2013, the FBI identified the operator of Silk Road, an online marketplace running on the anonymous Tor network, through a Stack Overflow post. Investigators found a coding question about connecting to a Tor hidden service, posted under a username called "frosty." One detail gave it away: the...
In 2026, researchers at Group-IB traced a single fraudulent investment platform back to a much larger network: the same contact details turned up across 23 other supposedly unrelated platforms, and the same hosting server turned up behind 208 more. Victims were reached through geo-targeted social media ads and...
Extortion groups now post claims of responsibility within hours of a breach, sometimes before the affected organization has finished scoping the damage. Security teams are left holding a partial log trail, a screenshot from a leak site, and no reliable way to know whether the claim is genuine, opportunistic, or...
For years, auditors at Wirecard signed off on financial statements showing billions of euros in cash that did not exist. Automated reconciliation systems processed the figures. Compliance checks cleared. When it finally collapsed in 2020, €1.9B in cash had simply never existed. Detection systems had access to the data....
A vendor questionnaire comes back clean. Documents are in order. The entity appears on no sanctions list, so the relationship moves forward. Six months later, it emerges that the company's actual controlling party has a history of regulatory enforcement in another jurisdiction, that several of its directors are...
