Latest news with #Group-IB


Channel Post MEA
6 days ago
- Business
- Channel Post MEA
Group-IB Solidifys Its Presence In Egypt
Group-IB has announced its expansion into Egypt, a strategic move aimed to meet the country's rising demand for cutting-edge cyber defense solutions and support the growing needs of the broader Middle East and Africa region. Operating in collaboration with its trusted local distributor, Group-IB will work closely with enterprises, government bodies, and critical infrastructure providers in Egypt, delivering tailored cybersecurity services, investigations, and digital risk protection. This step reflects the company's commitment to supporting local cybersecurity resilience and playing an active role in the region's cyber defense. 'With the increasing demand for reliable cybersecurity services in Egypt and Africa, our growing local team in Cairo allows us to be on the ground where it matters most,' said Ahmed Thawat, Regional Director – Africa, Levant, and Qatar at Group-IB. 'This isn't just about expanding operations—it's about being present, responsive, and aligned with the needs of the Egyptian market. We're here to deliver real results, build trust, and help shape a more secure digital future.' Group-IB's expansion into the Egyptian market is also part of its broader glocal strategy—a decentralized approach designed to embed the company's global expertise within local markets, providing local insights, and tailored solutions. 'Our decentralized model is built on the belief that cybersecurity must be local to be effective,' said Ashraf Koheil, Vice President of Sales, META and ANZ at Group-IB. 'Egypt is a key part of that vision. We're investing in local talent, responding in real-time to regional threats, and tailoring our solutions to match the unique challenges faced by our partners on the ground. That's the future of cyber defense—global intelligence with local execution.' With over two decades of experience across 60+ countries, Group-IB has built a solid global reputation, working with law enforcement agencies, national authorities, and leading companies. The company provides end-to-end services ranging from threat detection and incident response to digital forensics, data recovery, and breach containment. Its local team in Cairo—is already active on the ground, supporting key sectors in Egypt with real-time threat mitigation and investigation efforts. ' This demonstrates Group-IB's practical, hands-on approach and deep understanding of regional challenges,' added Ahmed Tharwat, Regional Director – Africa, Levant, and Qatar at Group-IB. Group-IB also aims to nurture local cybersecurity talent through professional training and upskilling programs, reinforcing its long-term vision of empowering self-reliant cyber capabilities across Egypt and neighboring countries. As part of its regional engagement, Group-IB will be participating in CAISEC 2025, Egypt's flagship cybersecurity event, to showcase its latest technologies, threat intelligence capabilities, and local initiatives. Visitors are invited to connect with Group-IB experts to explore how the company is helping protect Egypt's digital infrastructure and building a safer cyber environment across the region.


Channel Post MEA
07-05-2025
- Business
- Channel Post MEA
Group-IB Inks Series Of MoUs At GISEC Global 2025
Group-IB has signed strategic Memorandums of Understanding with local and regional cybersecurity leaders, and is showcasing its cutting-edge threat detection and fraud prevention capabilities at GISEC Global 2025, taking place from May 6 to 8 at the Dubai World Trade Centre. Group-IB is presenting the capabilities of its Cyber Fusion Center, a unique intelligence-driven ecosystem designed to unify fraud protection, threat intelligence, digital risk monitoring, network security, and cloud protection. Visitors will have the opportunity to explore the company's latest solutions, including: Fraud Protection (FP): Real-time detection and response to digital fraud across financial and e-commerce platforms. Threat Intelligence (TI): Tailored threat insights built on proprietary data to help organisations stay ahead of cyber adversaries. Digital Risk Protection (DRP): Proactive defense against brand abuse, impersonation, and data leaks across the surface, deep, and dark web. Attack Surface Management (ASM): Continuous discovery and analysis of internet-facing assets to identify vulnerabilities and reduce exposure to external threats. Managed Extended Detection and Response (MXDR): A unified, fully managed solution combining Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Business Email Protection (BEP), and malware analysis to deliver 24/7 threat detection, investigation, and response across endpoints, networks, and cloud environments. Commenting on their participation, Dmitry Volkov, CEO of Group-IB, said: 'As the boundaries between cyber threats and online fraud continue to blur, organisations need a unified approach to stay ahead. At GISEC Global 2025, we are proud to showcase how our Cyber Fusion Center brings together fraud prevention, threat intelligence, and digital risk protection under one roof. This fusion-driven model is not just the future, it's the new standard for securing digital ecosystems in an increasingly automated threat landscape.' On the sidelines of the event, Group-IB has forged strategic alliances through multiple Memorandum of Understanding signings with local and regional cybersecurity stakeholders, including Alpha Data, one of the leading digital transformation providers & system integrators in the Middle East. Additionally, Group-IB will sign a partnership with CyberGate Defense, leading UAE-based cybersecurity firm providing end-to-end cybersecurity services to governments and enterprises globally. These agreements will pave the way for deeper collaboration in areas such as intelligence sharing, joint awareness efforts, and coordinated cybersecurity initiatives aimed at enhancing market presence and expanding access to advanced cyber defense technologies across the region. Ashraf Koheil, Regional Sales Director MEA at Group-IB, said: 'These partnerships reflect Group-IB's deep commitment to supporting the UAE's forward-looking vision for cybersecurity resilience and digital trust. By collaborating with key regional stakeholders, we aim to strengthen collective defenses and contribute to the region's growing role as a global cybersecurity hub. Our goal is to ensure that cutting-edge threat intelligence and fraud prevention capabilities are accessible and aligned with the strategic priorities of governments and enterprises across the Middle East and Africa.' During the event, Group-IB will also deliver a featured presentation on the Dark Stage during the second day of the event. The session, titled 'AI Operators and Agents: The Rise of Automation and Fraud' will explore how cybercriminals are adopting automation to scale fraudulent operations and maximise ROI. It will include a live hack demonstration, offering attendees a closer look at how stolen credit card data is tested and online banking systems exploited. Moreover, Group-IB has recently introduced a proprietary AI Assistant designed to streamline the way cybersecurity professionals interact with threat intelligence. The solution enables users to receive structured, context-rich insights in real time through plain-language queries, eliminating the need for manual data filtering or navigating complex reports. Built with a privacy-first approach, the AI Assistant supports faster, more informed decision-making without compromising data security. Group-IB is present at GISEC 2025, from 6-8 May, at Hall 07, Stand B105. 0 0


Zawya
07-05-2025
- Business
- Zawya
Group-IB signs strategic MoUs with local and regional cybersecurity leaders at GISEC Global 2025
UAE, Dubai: Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, signs strategic Memorandum of Understanding signings with local and regional cybersecurity leaders, and showcases its cutting-edge threat detection and fraud prevention capabilities at GISEC Global 2025, taking place from May 6 to 8 at the Dubai World Trade Centre. Group-IB is presenting the capabilities of its Cyber Fusion Center, a unique intelligence-driven ecosystem designed to unify fraud protection, threat intelligence, digital risk monitoring, network security, and cloud protection. Visitors will have the opportunity to explore the company's latest solutions, including: Fraud Protection (FP): Real-time detection and response to digital fraud across financial and e-commerce platforms. Threat Intelligence (TI): Tailored threat insights built on proprietary data to help organisations stay ahead of cyber adversaries. Digital Risk Protection (DRP): Proactive defense against brand abuse, impersonation, and data leaks across the surface, deep, and dark web. Attack Surface Management (ASM): Continuous discovery and analysis of internet-facing assets to identify vulnerabilities and reduce exposure to external threats. Managed Extended Detection and Response (MXDR): A unified, fully managed solution combining Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Business Email Protection (BEP), and malware analysis to deliver 24/7 threat detection, investigation, and response across endpoints, networks, and cloud environments. Commenting on their participation, Dmitry Volkov, CEO of Group-IB, said: 'As the boundaries between cyber threats and online fraud continue to blur, organisations need a unified approach to stay ahead. At GISEC Global 2025, we are proud to showcase how our Cyber Fusion Center brings together fraud prevention, threat intelligence, and digital risk protection under one roof. This fusion-driven model is not just the future, it's the new standard for securing digital ecosystems in an increasingly automated threat landscape.' On the sidelines of the event, Group-IB has forged strategic alliances through multiple Memorandum of Understanding signings with local and regional cybersecurity stakeholders, including Alpha Data, one of the leading digital transformation providers & system integrators in the Middle East. Additionally, Group-IB will sign a partnership with CyberGate Defense, leading UAE-based cybersecurity firm providing end-to-end cybersecurity services to governments and enterprises globally. These agreements will pave the way for deeper collaboration in areas such as intelligence sharing, joint awareness efforts, and coordinated cybersecurity initiatives aimed at enhancing market presence and expanding access to advanced cyber defense technologies across the region. Ashraf Koheil, Regional Sales Director MEA at Group-IB, said: 'These partnerships reflect Group-IB's deep commitment to supporting the UAE's forward-looking vision for cybersecurity resilience and digital trust. By collaborating with key regional stakeholders, we aim to strengthen collective defenses and contribute to the region's growing role as a global cybersecurity hub. Our goal is to ensure that cutting-edge threat intelligence and fraud prevention capabilities are accessible and aligned with the strategic priorities of governments and enterprises across the Middle East and Africa.' During the event, Group-IB will also deliver a featured presentation on the Dark Stage during the second day of the event. The session, titled 'AI Operators and Agents: The Rise of Automation and Fraud ' will explore how cybercriminals are adopting automation to scale fraudulent operations and maximise ROI. It will include a live hack demonstration, offering attendees a closer look at how stolen credit card data is tested and online banking systems exploited. Moreover, Group-IB has recently introduced a proprietary AI Assistant designed to streamline the way cybersecurity professionals interact with threat intelligence. The solution enables users to receive structured, context-rich insights in real time through plain-language queries, eliminating the need for manual data filtering or navigating complex reports. Built with a privacy-first approach, the AI Assistant supports faster, more informed decision-making without compromising data security. Group-IB will be present at GISEC 2025, from 6-8 May, at Hall 07, Stand B105. ABOUT GROUP-IB Established in 2003, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime globally. Headquartered in Singapore, and with Digital Crime Resistance Centers in the Americas, Europe, Middle East and Africa, Central Asia, and the Asia-Pacific, Group-IB analyses and neutralizes regional and country-specific cyber threats via its Unified Risk Platform, offering unparalleled defense through its industry-leading Threat Intelligence, Fraud Protection, Digital Risk Protection, Managed Extended Detection and Response (XDR), Business Email Protection, and External Attack Surface Management solutions, catering to government, retail, healthcare, gaming, financial sectors, and beyond. Group-IB collaborates with international law enforcement agencies like INTERPOL, EUROPOL, and AFRIPOL to fortify cybersecurity worldwide, and has been awarded by advisory agencies including Aite-Novarica, Gartner, Forrester, Frost & Sullivan, and KuppingerCole.


Gulf Today
19-03-2025
- Business
- Gulf Today
Report highlights cybersecurity challenges in the Middle East
Sajjad Ahmad, Deputy Business Editor State-sponsored cyber threats, including Advanced Persistent Attacks (APTs) and Hacktivism surged in the Middle East in 2024, with GCC countries emerging as primary targets. These attacks are largely fuelled by geopolitical conflicts, according to a report released by Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Released recently, Group-IB's High-Tech Crime Trends Report 2025 provides a comprehensive analysis on the interconnectivity of cybercrime, and the evolving cyber threat landscape in the Middle East and Africa region. The report offers valuable intelligence on advanced persistent threats, hacktivism, and emerging cyber threats, empowering businesses, cybersecurity professionals, and law enforcement in the Middle East with the insights needed to enhance their cybersecurity strategies. The report said that though APTs in the region saw a 4.27 per cent increase compared to a 58 per cent surge globally, 27.5 per cent of these threats from state-backed espionage groups were actively targeted at GCC countries. Commenting on the release of the report, Ashraf Koheil, Regional Sales Director MEA at Group-IB, said: 'Our report captures the dynamic and complex nature of cyber threats faced by the Middle East today. It shows that cybercrime is not a collection of isolated incidents, but an evolving ecosystem where one attack fuels the next. From sophisticated state-sponsored attacks to rapidly evolving hacktivism and phishing campaigns, the insights presented in this report are essential for organizations seeking to strengthen their cybersecurity defences.' While GCC countries were the most targeted due to their strategic economic and political importance, other significant targets included Egypt (13.2%) and Turkey (9.9%), reflecting their geopolitical roles, while countries like Jordan (7.7%), Iraq (6.6%), as well as Nigeria, South Africa, Morocco, and Ethiopia also face growing cyber threats. In 2024, the Middle East and Africa (MEA) ranked third globally in hacktivist attacks, accounting for 16.54% of incidents, trailing behind Europe (35.98%) and Asia-Pacific (39.19%). According to the report, the primary industries affected included government and military sectors (22.1%), financial services (10.9%), education (8%), and media and entertainment (5.2%) sectors were also targeted, with attacks aimed at disrupting critical infrastructure and essential services. This uptick is driven by ongoing geopolitical tensions, where cyberattacks are used for ideological expression or political retaliation. The report also shed light on other pressing cybersecurity challenges including the persistent threat of phishing and data breaches across the GCC and the wider MEA region. As the region continues its rapid digital transformation, it has become a prime target for increasingly sophisticated scams targeting the energy, oil and gas industry (24.9%), financial services (20.2%) highlighting the economic motives behind cybercrime. Phishing attacks also remain a major threat, with internet services (32.8%), telecommunications (20.7%), and financial services (18.8%) being the top targeted sectors in the META region. 'We must embrace a collective defence strategy that unites financial institutions, telecommunications providers, and law enforcement agencies. By sharing intelligence, coordinating proactive security measures, and executing joint actions, we can disrupt fraudulent activities before they cause harm. This collaborative approach not only enhances our ability to detect and prevent fraud but also strengthens the resilience of our critical infrastructure, protects our national security,' added Ashraf Koheil. The report highlighted that ransomware attacks remained relatively low in the MEA region, with only 184 incidents (the lowest globally). It also highlights ongoing concerns regarding Initial Access Brokers (IABs) and the broader vulnerabilities they exploit. In 2024, IAB activity was significant in the region, with GCC countries (23.2%) and Turkey (20.5%) emerging as the most targeted jurisdictions. Meanwhile, the figures for compromised hosts—which represent credentials and sensitive data from compromised devices, often sold on the dark web—were highest in Egypt (88,951), followed by Turkey (79,789) and Algeria (49,173) exposing significant cybersecurity gaps. Dark web economy: Stolen credentials and sensitive corporate data sold on the dark web served as critical entry points for ransomware operators, state-sponsored attackers, and other cybercriminals. The report disclosed that over 6.5 billion leaked data entries included email addresses, with nearly 2.5 billion being unique. Additionally, 3.3 billion leaked entries contained phone numbers, with approximately 631 million unique numbers. A staggering 460 million passwords were exposed globally in 2024, with 162 million of them being unique. This surge in exposed data continues to fuel cybercriminal activities within the dark web economy, amplifying the risk to organizations and individuals alike. Dmitry Volkov, CEO of Group-IB emphasizes the company's role in global cybercrime prevention: 'Group-IB played an intensified role in its global fight against cybercrime and contributed to eight major law enforcement operations across 60+ countries, leading to 1,221 cybercriminal arrests and the dismantling of over 207,000 malicious infrastructures. These efforts disrupted large-scale cybercriminal networks, highlighting the critical role of collaboration between private cybersecurity firms and international law enforcement.' The report said threat actors employed advanced tactics, techniques, and procedures (TTPs), including social engineering, ransomware, and credential theft. New techniques such as the Extended Attributes Attack, Facial-Recognition Trojan ( and ClickFix infection chain showcase the evolving sophistication of cyber threats in the region.


Khaleej Times
17-03-2025
- Business
- Khaleej Times
UAE: Posting high-resolution photos on social media could put you at risk; here's why
Enjoy sharing high-quality photographs on social media platforms? Here's why you should take a step back — UAE residents have been warned against posting high-resolution images online, as they could be exploited for identity theft, SIM swapping, and man-in-the-middle (MITM) attacks. "If you have two high-resolution images on social media, scammers can identify figure prints, and they can create digital identity or image to create a bank account or create an e-SIM," said Ashraf Koheil, regional sales director for Meta, Group-IB. Social media penetration in the UAE is relatively high, as an average resident has more than one social media account, including Facebook, WhatsApp, Instagram and YouTube. Cybersecurity experts warn that cybercriminals are increasingly targeting Friday nights, knowing that security operations are not running at full capacity on that day. "They could manipulate digital identity and date of birth and create a crypto account and use that account for money laundering and terror financing," he said. Koheil also added that students from financially sound backgrounds are often targeted. SIM swapping, MITM attacks Although criminals could use high-res images for facial recognition or create deepfakes, this is not the most significant security concern, said Andreas Hassellöf, CEO of Ombori. "The real risks stem from sharing personal data — such as email addresses, phone numbers and other sensitive details — that can directly be exploited. It's still important to be mindful of your digital footprint and limit sharing personal information; however, the focus should be on defending against more immediate threats like phishing, SIM swapping, and other forms of identity theft that are much more prevalent and dangerous in today's digital landscape," he said. Hassellöf noted that threats like SIM swapping, phishing, and man-in-the-middle (MITM) attacks are more significant and immediate risks. A SIM swap scam happens when criminals take control of someone's phone by tricking his carrier to connect his phone number to a SIM card. In an MITM attack, a perpetrator gets in the middle of communication to eavesdrop or impersonate. "While facial recognition technology is advancing, the real-world application of this in terms of stealing identities for financial gain is still quite distant. These are much more plausible ways in which someone's bank account or personal information can be compromised. In fact, voice cloning and deepfakes are far more of a threat, and they do have real-world examples where people have been tricked or scammed out of significant sums of money," he added. More attacks on Fridays Ashraf Koheil elaborated that attackers try to hide in high-traffic waves. "For example, a telecom firm is running a back-to-school holiday promotion. This is when they start bombarding messages. Second, they do geofencing. For instance, if you log in from a website in the UAE, you may be able to see Salik. If you log in from Saudi Arabia, you may see a local service provider; if you log in from Egypt, you may see another local company. So, they are making it very difficult for technology vendors to detect. "They start phishing attacks on Friday night because they know that security operations are relaxed on the weekend," Koheil added. As a result of these challenges, security firms that could usually detect and stop an attack within an hour may take up to four hours. "Just like we study them, they study us as well," Koheil said. Multi-factor authentication To address threats of SIM swapping and MITM attacks, Andreas Hassellöf of Ombori suggested that the solution lies in implementing multi-factor authentication to add layers of security, using AI-driven technologies to detect manipulated images, and leveraging blockchain-based identity management for tamper-proof protection. "While the fear of biometric misuse is understandable, the focus should remain on addressing the more realistic and pressing security vulnerabilities," he added.