Connect with us

Technology

Group-IB reveals Hi-Tech Crime Trends 23/24: surge in ransomware against backdrop of growing AI, macOS threats

Published

3 years ago

on

SINGAPORE, Feb. 29, 2024 /PRNewswire/ — Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, is proud to announce the launch of its new report Hi-Tech Crime Trends 2023/2024, the latest edition of the company’s annual round-up of the most pressing global cyber threats to organizations and individuals. In the research, Group-IB analysts reveal how the unholy alliance between ransomware groups and Initial Access Brokers (IABs) is still the powerful engine for cybercriminal industry, evidenced by the 74% year-on-year increase in the number of companies that had their data uploaded on dedicated leak sites (DLS). Global threat actors also demonstrated increased interest in Apple platforms, exemplified by the fivefold increase in underground sales related to macOS information stealers.

The growing appetite of nation-state sponsored threat actors, also known as advanced persistent threat (APT) groups, has shown that no region is immune to cyber threats. Group-IB experts discovered a 70% increase in the number of public posts offering zero-day exploits for sale, and also identified cybercriminals’ malicious use of legitimate services and artificial intelligence (AI) infused technologies as the main cyber risks for 2024.

The first edition of Hi-Tech Crime Trends was launched 12 years ago, and the information contained in the report enables businesses, NGOs, governments, and law enforcement agencies around the world to fight cybercrime and help potential victims. For the first time, Hi-Tech Crime Trends includes a section outlining the intricate relationship between artificial intelligence (AI) and cybersecurity threats, outlining how this new technology is being leveraged by cybercriminals, including the misuse of large language models (LLM) such as ChatGPT, and the potential risks to corporate data through AI integration.

Nothing artificial about this threat

Threat actors have already shown how AI can help them develop malware only with a limited knowledge of programming languages, brainstorm new TTPs, compose convincing text to be used in social engineering attacks, and also increase their operational productivity.

Large language models (LLM) such as ChatGPT remain in widespread use, and Group-IB analysts have observed continued interest on underground forums in ChatGPT jailbreaking and specialized generative pre-trained transformer (GPT) development, looking for ways to bypass ChatGPT’s security controls. Group-IB experts have also noticed how, since mid-2023, four ChatGPT-style tools have been developed for the purpose of assisting cybercriminal activity: WolfGPT, DarkBARD, FraudGPT, and WormGPT – all with different functionalities.

FraudGPT and WormGPT are highly discussed tools on underground forums and Telegram channels, tailored for social engineering and phishing. Conversely, tools like WolfGPT, focusing on code or exploits, are less popular due to training complexities and usability issues. Yet, their advancement poses risks for sophisticated attacks.

Group-IB’s Hi-Tech Crime Trends 2023/2024 also highlighted the sale of compromised ChatGPT credentials on the dark web, building upon past research. With more employees relying on ChatGPT for work optimization and its storage of past interactions, compromised logins could expose sensitive information, posing significant security risks for businesses.

From January 2023 to October 2023, Group-IB detected more than 225,000 logs up for sale on the dark web containing compromised ChatGPT credentials. Group-IB’s Threat Intelligence platform found these compromised credentials within the logs of information-stealing malware traded on illicit dark web marketplaces.

Notably, the number of compromised hosts with access to ChatGPT detected by Threat Intelligence between June 2023 and October 2023 was more than 130,000, an increase of 36% compared to the preceding five-month period (January-May 2023). The number of available logs containing ChatGPT logs peaked in the final month of the study – in October 2023 – when 33,080 were registered. Group-IB’s analysis found that the majority of the logs containing ChatGPT accounts were breached by the LummaC2 information stealer.

Double trouble: ransomware gangs and initial access brokers wreak havoc

Group-IB’s Threat Intelligence unit constantly monitors all ransomware activity and detected 4,583 companies that had their information, files, and data published on ransomware DLSs in 2023. This marks a growth of 74% compared to the previous year, when 2,629 such posts were made. Group-IB researchers note that the number of total ransomware attacks worldwide is likely to be much larger, with probable instances of organizations paying the ransom or groups deciding not to go ahead with their threat of publishing data on a DLS.

Companies based in North America most commonly appeared in the DLS posts of ransomware groups, accounting for 2,487 (or 54%) of the annual total, and more than double the corresponding figure in 2022 (1,192 companies). Roughly 26% of posts on ransomware DLSs related to companies from Europe (1,186, up 52% YoY) and 10% were from the APAC region (463, up 39% YoY).

The United States was the most common target for ransomware groups, as 1,060 US-based companies were the subject of ransomware DLS posts in 2023. The next most affected countries were Germany (129), Canada (115), France (103), and Italy (100). 

In terms of affected industries, attacks as per ransomware DLS on manufacturing (580 instances) and real estate (429) companies rose year-on-year by 125% and 165%, respectively, and these key sectors were the two most targeted worldwide. Notably, Group-IB observed a 88% year-on-year increase in ransomware DLS posts related to healthcare companies, and a 65% rise in posts concerning government and military organizations.

Throughout the reporting period, Group-IB experts uncovered 27 new advertisements for ransomware-as-a-service programs on dark web forums, including well-known groups such as Qilin, as well as other collectives that have yet to be seen in the wild. As was the case in 2022, LockBit was 2023’s most prominent ransomware-as-a-service group with 1,079 posts on its DLS (24% of the annual total). In second place was BlackCat with 427 posts (9% of annual total) and third was Clop (385 posts or 9%).

Researchers also found that Initial Access Brokers (IABs) are continuing to play a significant role in the ransomware market. In 2023, they found 2,675 instances of corporate put up for sale – almost an identical figure compared with 2022, when 2,702 offers were found.

Notably, Group-IB data shows that the average price for corporate access in 2023 was $2,470, which represents a 27% reduction compared to the preceding year. Group-IB analysts believe that this drop in average price is due to a rise in the number of new sellers entering the market that have lowered the price of their offers in order to attract buyers.

Companies in the United States (29%), the United Kingdom (4%) and Brazil (4%) were the most commonly featured in IAB offers. Professional services, government and military organizations, financial services, manufacturing, and real estate were the verticals that appeared most frequently.

APTitude test

Group-IB researchers discovered that the Asia-Pacific region was the world’s main battleground for nation-state sponsored threat actors, also known as advanced persistent threat (APT) groups last year. In sum, Group-IB attributed 523 attacks to nation-state actors across the globe in 2023.

Attacks on APAC organizations accounted for 34% of the global total, with Group-IB experts asserting that this may be due to the high level of financial technology development in this global economic hub in addition to geopolitical tensions. Europe was the second-most targeted region, accounting for 22% of all APT attacks, and the Middle East and Africa (MEA) was third (16% of APT attacks in 2023).

Unsurprisingly, government and military entities were the prime target of APT attacks in 2023, accounting for 28% of the annual figure. This strengthens the theory of Group-IB’s Threat Intelligence unit that APT actors are predominantly striving to gain access to strategically important evidence and weaken government entities in their country or region of target. Financial services (6%), telecommunications (5%), manufacturing, IT and media (all 4%) were also heavily affected, Group-IB researchers found.

In the past year, prominent APT groups, including the North Korean collective Lazarus, launched new tactics. Lazarus executed the first-ever double supply chain attack, exploiting a vulnerability in X_TRADER, a software by Trading Technologies. This allowed access to the network of the widely-used 3CX Desktop App for VoIP calls, compromising a wide range of 3CX clients. Group-IB researchers also noted APT groups’ ongoing malicious use of legitimate services like Dropbox, OneDrive, Google Drive, and messengers like Telegram.

Turbulence ahead

In 2023, cyber threats shifted focus from Windows and Android to Apple platforms due to their rising popularity and market share, with iOS becoming increasingly targeted. Malware spread through the App Store, alongside increased use of Apple cloud services, contributed to this trend. By March 6, 2024, Apple is expected to allow third-party app stores for iOS apps in Europe, posing security concerns amidst 1.7 million app rejections in 2022. Threat actors have already adapted Android schemes to iOS, exemplified by GoldFactory and the GoldPickaxe.iOS malware – аctive in Thailand and Vietnam – which prompts victims to record videos of their faces and submit them to the threat actors, which could be used by the latter to gain unauthorized access to the victim’s banking accounts. Additionally, the number of sales posts on the most popular underground forums (xss[.]is and exploit[.]in) for information stealers designed to operate on macOS increased fivefold in 2023, from 8 in 2022 to 49.

Javascript sniffers, also known as malicious JavaScript code implanted in compromised websites designed to intercept payment card details from customers who make online transactions, are also likely to pose a risk to online store owners, consumers, and banks in 2024. Group-IB researchers discovered 5,037 websites compromised with JS-sniffers in 2023, of which 2,474 were unique. A total of 14 new JS-sniffer families were also discovered in 2023, highlighting the continued development of this threat.

“As highlighted by Group-IB’s Hi-Tech Crime Trends 2023/2024 report, the rise of AI in both legitimate businesses and the cybercriminal underworld was a critical trend of 2023. With the increased misuse of ChatGPT and the development of underground LLM tools, the potential for sophisticated attacks has escalated, compounded by the alarming surge in compromised ChatGPT credentials. This along with cybercriminals’ increased interest in malware designed for macOS demonstrates that it is imperative for organizations to recognize and address this evolving threat landscape, safeguarding sensitive information and fortifying cybersecurity measures to mitigate risks posed by AI-driven cybercrime,” Dmitry Volkov, CEO at Group-IB, said.

A full round-up of the top global threats and invaluable insights from the Group-IB Threat Intelligence unit can be found in the full Hi-Tech Crime Trends 2023/2024 report.

View original content to download multimedia:https://www.prnewswire.com/news-releases/group-ib-reveals-hi-tech-crime-trends-2324-surge-in-ransomware-against-backdrop-of-growing-ai-macos-threats-302075538.html

SOURCE Group-IB

Related Topics:
Continue Reading

Technology

In HelloNation, Custom Fabrication Expert Mark Coyle Explains a Common Mistake in Custom Aluminum Design

Published

38 minutes ago

on

October 24, 2026

By

The article explains why smart geometry, not thicker walls, creates stronger, more efficient aluminum components.

ROCHESTER, N.Y., Oct. 24, 2026 /PRNewswire/ — What early design choice causes many custom aluminum projects to become heavier, costlier, or harder to manufacture? That question is addressed in a HelloNation article featuring insights from Custom Fabrication Expert Mark Coyle of American Custom Metals, Inc. in Rochester, New York, that outlines how misunderstanding aluminum behavior leads designers to rely on thick walls instead of stronger geometry.

The article begins by explaining that many people assume thicker walls automatically make aluminum parts stronger. It notes that aluminum does not respond to wall thickness the way steel does. Instead, its performance is shaped by how the metal flows through the extrusion die. The article states that custom aluminum design is more effective when profiles use ribs, chambers, and flanges to create stiffness without adding unnecessary weight. This guidance helps readers understand why adding material often increases cost without improving strength.

The article also highlights that thicker walls change how aluminum moves during extrusion. When heavy areas fill more slowly, the metal cools unevenly and can develop stress that only appears later. The HelloNation piece explains that well-balanced geometry keeps extrusion smooth and predictable. This consistency makes it easier to maintain dimensional accuracy across long production runs. By focusing on geometry, custom aluminum design avoids the problems that come with slow extrusion speeds and uneven cooling.

Another insight in the article centers on how ribs and internal supports influence stability. It describes how a thin wall supported by a properly placed rib often performs better than a thick wall with no reinforcement. This happens because the rib helps distribute load, improve stiffness, and guide the aluminum as it cools. The article explains that this structural approach makes custom aluminum design more efficient and gives designers more control over how the final part behaves under pressure.

The article also shows why early collaboration between designer and fabricator prevents costly changes. It states that a fabricator familiar with extrusion can catch potential issues before a die is built. Small adjustments to corners or transitions can remove weak points or improve metal flow. The article notes that this teamwork keeps the design aligned with real-world production. By working together early, both sides reduce the risk of redesigning the die after the first test run.

Machining is another area where the article explains how wall thickness affects performance. Features such as deep pockets or sharp internal angles may require slow feed rates or special tooling. When walls are thicker than needed, those areas can become difficult to machine cleanly. The article states that thoughtful custom aluminum design makes machining more predictable. Small changes, such as adding radiused edges or sizing features to match standard tools, help shorten cycle times and prevent tool wear.

Thermal behavior receives detailed attention as well. The article explains that aluminum retains heat differently depending on the mass of each section. Thicker walls hold heat longer, which increases the chance of distortion during extrusion, machining, or finishing. When a design uses geometry to create strength, the material cools more evenly. This reduces warping and helps long profiles stay aligned. The article notes that stable cooling is important for components that require a precise fit and consistent shape throughout an entire production run.

Cost is also a key topic in the article. It states that heavier profiles increase material use, extrusion time, and tooling needs. A custom aluminum design that relies on geometry instead of mass lowers material consumption and keeps the fabrication process efficient. The article explains that lighter parts are easier to handle, ship, and assemble. This saves money across multiple stages of production and supports long-term manufacturing efficiency.

The article also notes that smart custom aluminum design creates profiles that behave predictably during extrusion and machining. Smooth transitions, balanced wall dimensions, and structural features help reduce the chance of distortion or dimensional drift. These elements also lower scrap rates and support reliable performance. By using geometry instead of excess material, designers build parts that maintain strength without compromising manufacturability.

As the article concludes, it emphasizes that avoiding thick walls is one of the best ways to improve performance and lower cost. It states that the most dependable custom aluminum components come from designs that use structural features to strengthen the profile. When designers understand how aluminum behaves at each stage of extrusion and machining, they create parts that are strong, efficient, and consistent from batch to batch. This approach turns custom aluminum design into a predictable process rather than a series of uncertain adjustments.

A Common Mistake in Custom Aluminum Design features insights from Mark Coyle, Custom Fabrication Expert of Rochester, NY, in HelloNation.

About HelloNation
HelloNation is America’s Good News Network, a premier media platform built on the idea that good news travels faster when real people tell real stories. Through its community-focused publications and innovative “edvertising” approach, HelloNation delivers content that informs, inspires, and spotlights the leaders making a meaningful impact in their communities.

View original content to download multimedia:https://www.prnewswire.com/news-releases/in-hellonation-custom-fabrication-expert-mark-coyle-explains-a-common-mistake-in-custom-aluminum-design-302918282.html

SOURCE HelloNation

Continue Reading

Technology

World Young Scientist Summit 2026 Opens in Wenzhou, Zhejiang

Published

2 hours ago

on

October 24, 2026

By

WENZHOU, China, Oct. 24, 2026 /PRNewswire/ — This is a report by China Daily:

On October 24, the World Young Scientist Summit 2026 opened in Wenzhou, Zhejiang. The event is hosted by the China Association for Science and Technology (CAST), the Zhejiang Provincial People’s Government, and the World Association of Young Scientists. Nearly 800 representatives, including scientists, educators, and entrepreneurs from more than 60 countries and regions, are attending the summit.

He Junke, Vice President of CAST in charge of daily work and First Secretary of its Secretariat; Lian Yimin, Chairman and Party Group Secretary of the Zhejiang Provincial Committee of the Chinese People’s Political Consultative Conference; Marcelo Knobel, Executive Director of The World Academy of Sciences; and Zhang Zhenfeng, Member of the Standing Committee of the CPC Zhejiang Provincial Committee and Secretary of the CPC Wenzhou Municipal Committee, attended the summit and delivered remarks. Yao Gaoyuan, Vice Governor of the Zhejiang Provincial People’s Government, presided over the first segment of the plenary session.

With the theme “Gathering Talents Worldwide to Create a Better Future,” the summit’s annual agenda is “Global Youth Action in the AI Era: Building a Sustainable Future.” It aims to draw on the insights of young people around the world, deepen international sci-tech cooperation, and jointly address questions about young people, science, the world and the future.

Efim Zelmanov, Fields Medalist and Foreign Member of the Chinese Academy of Sciences; Chen Yunji, Deputy Director of the Institute of Computing Technology, CAS, and Director of the National Key Laboratory of Processor Chips; Mary Garson, President of the International Union of Pure and Applied Chemistry; and Lu Chaoyang, Member of the Standing Committee of CAST, Executive Dean of the Shanghai Institute of Advanced Study, University of Science and Technology of China, and Chairman of the Council of the World Association of Young Scientists, delivered keynote speeches respectively on education reform in the AI era, AI and processor chips, young women scientists’ participation in science, and quantum computing. They explored new opportunities for scientific research, talent cultivation, and international cooperation in the AI era.

This year’s summit placed greater emphasis on the growth needs of young scientists, with young talents under the age of 45 accounting for 88 percent of participants. It aimed to build a cluster of international journals, bring together young scientific talent, facilitate a batch of international collaborative projects and advance the application and commercialization of scientific and technological achievements. The summit released the Report on the Distribution and Mobility of Young Scientists in the Field of Embodied Intelligence, launched the World Young Scientist Summit Partner Journal Program and the 2026 World Young Scientist Innovation and Entrepreneurship Growth Support Program. It also published the “Young Scientist Pioneers 2035” list and announced the 2026 Sustainable Development Young Scientist Award. The awards were presented to four Chinese and foreign scientists.

Chen Tianrun, Founder of Hangzhou Moxin Technology Co., Ltd.; Yuan Yang, Assistant to the Dean of the Institute for Interdisciplinary Information Sciences at Tsinghua University; and two of the 2026 Sustainable Development Young Scientist Award winners, César de la Fuente and Nicola Segata, among other Chinese and foreign young scientist representatives, spoke at the flash-talk session to share their research practices and reflections.

In addition, the conference focused on fields such as future manufacturing, quantum information, embodied intelligence, brain-computer intelligence, environmental science, deep-sea resources, and life and health, and held 12 parallel forums. It also included the “Gravitation π” Future Technology and Concept Products Exhibition and Exchange, local thematic side events, and sci-tech and humanities study visits, further building an interdisciplinary, cross-regional and cross-sector platform for youth sci-tech exchange and cooperation.

View original content to download multimedia:https://www.prnewswire.com/news-releases/world-young-scientist-summit-2026-opens-in-wenzhou-zhejiang-302918664.html

SOURCE China Daily

Continue Reading

Technology

The Ultimate Send-off to Summer: CSTS Debuts Global Entertainment IP PremierX at New York’s Pier 17, Ushering in a New Era of Live Entertainment

Published

4 hours ago

on

October 24, 2026

By

NEW YORK, Oct. 24, 2026 /PRNewswire/ — CSTS Enterprises (‘CSTS’), a New York-based sports, entertainment, integrated media and travel technology group, today announced the official launch of PremierXTM, its flagship live entertainment brand, with a landmark Halloween Weekend event “AFTER DARK” at The Rooftop at Pier 17 in New York on October 30, 2026.

Capping off Seaport’s 2026 Summer Season in unforgettable fashion, the grand finale brings a powerhouse lineup of stars to the PremierXTM stage at Pier 17, featuring Lil Xan, Armani White, DJ Soda, Nate Wyatt, and surprise A-list guest headliners. Set against the iconic Manhattan skyline, the landmark eventing unites chart-topping hip-hop and high-octane electronic music for a festival-grade experience as The Rooftop at Pier 17 transforms into the city’s premier live music destination.

Building on the momentum of the PremierXTM After Party for the 2026 World Cup Final that took place in New York on July 19th, “AFTER DARK” signals the official debut of PremierXTM, a proprietary, New York – born global entertainment IP created by CSTS to deliver defining cultural experiences at the intersection of music, sport, art and lifestyle. Centred on the power of cultural crossover, PremierXTM serves as an international bridge connecting East and West, modern innovation and timeless classical, while uniting world-class artists, creators, performers and audiences through the universal language of entertainment and premium live experiences.

The launch also marks the beginning of a promising relationship with Pier 17, providing a world-class stage for PremierXTM to accelerate its growth in the U.S. and engage international audiences over the long term. By combining PremierXTM’s global entertainment vision with Pier 17’s iconic waterfront setting, the partnership aims to create a premier destination for live experiences, empowering both platforms to expand their global reach, deepen audience engagement, and drive sustainable growth.

As a key pillar of CSTS’ integrated ecosystem spanning entertainment, sports, travel, integrated media and marketing solutions, PremierXTM further strengthens the Group’s ability to create high-impact experiences that connect audiences, destinations and brand partners. With the global live entertainment market projected to grow from approximately US$203 billion in 2025 to US$270 billion by 2030[1], PremierXTM is well-positioned to capitalize on the growing demand for premium, experience-led entertainment while creating long-term value to the Group through recurring audience engagement, tourism and brand partnerships.

“PremierX TM represents a significant milestone in CSTS’ evolution from a leading operator of global sports and hospitality platforms into a creator of world-class entertainment experiences,” said Abel Zhao, Group CEO and Executive Director at CSTS Enterprises. “The season finale at Pier17 marks the beginning of an exciting new chapter for CSTS as we expand our entertainment footprint and introduce a platform designed to deliver iconic live experiences and bring together artists and audiences from across the globe.”

“PremierXTM was built from the ground up as a bespoke platform to champion multicultural talent and visionary creative performers.” said Jason Liu, Regional Director of CSTS USA. “Starting from New York, we are building a scalable global brand that brings iconic live experiences to audiences worldwide while expanding our presence across key entertainment hubs in North America, Asia and Europe.”

Following its New York launch, PremierXTM plans to expand through a broader international rollout across North America, Asia and Europe, with future editions planned as part of a growing network of recurring live entertainment properties and flagship cultural events.

For ticket information on PremierXTM: “AFTER DARK”, visit
https://www.axs.com/events/1644912/after-dark-tickets

About CSTS Enterprises

CSTS Enterprises is an integrated media, entertainment, sports, and travel technology group. Headquartered in New York City, the company develops and partners with intellectual properties and brands to deliver compelling experiences that connect with audiences across the world. In addition to its own initiatives, including Generation CTM and PremierXTM, it collaborates with international IPs including FIFA World Cup, UEFA European Championship, and Formula 1.

CSTS integrates experiential marketing, travel, data, and technology to deliver seamless end-to-end audience experiences. The company engages consumers across physical events and digital channels, executing at scale worldwide, turning complex activations into co-ordinated, measurable outcomes.

[1] Source: Industry research by Markets and Markets, Live Entertainment Market Size, Share, Latest Trends & Growth Analysis, 2025-2030, Live Entertainment Market Size, Share, Latest Trends & Growth Analysis, 2025-2030.

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/the-ultimate-send-off-to-summer-csts-debuts-global-entertainment-ip-premierx-at-new-yorks-pier-17-ushering-in-a-new-era-of-live-entertainment-302918645.html

SOURCE CSTS Enterprises

Continue Reading

Trending