Report an incident

Get 24/7 incident response assistance from our global team

Anastasia Tikhonova

Global Threat Research Lead

Anastasia brings over 10 years of experience in researching financially motivated cybercrime. Specializing in tracking and analyzing APT activities by nation-state hackers, Anastasia leads her team in uncovering evolving tactics, techniques, and procedures (TTPs), exploring C&C infrastructures, and conducting in-depth malware analysis. Besides her research, Anastasia is an active participant in the APAC cybersecurity community, contributing to various interviews, webinars, and conferences, including the OT-ISAC Summit, Asia Pacific FS-ISAC Summit, and Govware. Her blend of technical expertise and community engagement makes her a notable figure in the field of cyber intelligence.

Awards and recognitions

Anastasia holds multiple Group-IB achievement coins for her outstanding contributions to threat research and product development:

PR-MAchine achievement

PR MACHINE challenge coin

Comrade

Comrade Fest 2021 challenge coin

Blog posts by Anastasia Tikhonova

Threat Intelligence
April 8, 2026
Cyber Saga: In the Footsteps of the DPRK IT Workers
Discover how North Korean threat actors use synthetic identities, AI-assisted workflows, and overlapping infrastructure to infiltrate companies, and learn actionable strategies to mitigate this insider threat.
11,739
Threat Landscape Overview
March 13, 2026
Six Supply Chain Attack Groups to Watch Out for in 2026
Who's attacking your vendors? Read about the six main supply chain attack groups who are driving SaaS, open-source, and MSP compromise in 2026. Learn how npm supply chain attacks threaten your security today, based on threat intelligence collected by Group-IB.
17,551
DocuSign Impersonation Wave
Email Protection Spotlight
January 5, 2026
The DocuSign Impersonation Wave with Real-Time Customizable LogoKit
Learn how Group-IB’s Business Email Protection stops the growing wave of DocuSign impersonation before users are exposed, and protects them from credential-capturing websites built with real-time customizable LogoKit.
5,731
Email Protection Spotlight
October 31, 2025
Detecting the NPM Supply Chain Compromise Before It Spread
Discover how Group-IB’s Business Email Protection (BEP) could prevent an NPM supply chain compromise by detecting the initial phishing email that led to the developer’s infection.
73,052
Advanced Persistent Threats
February 13, 2023
Nice Try Tonto Team
How a nation-state APT attempted to attack Group-IB
11,563
Threat Intelligence
June 16, 2022
Thousands of IDs exposed in yet another data breach in Brazil
Unsecured public-facing database allowed anyone to access ID selfies for months
8,953
Advanced Persistent Threats
August 3, 2021
The Art of Cyberwarfare
Chinese APTs attack Russia
8,501
Threat Intelligence
November 5, 2019
RDoS attacks by fake Fancy Bear hit banks in multiple locations
Group-IB experts have detected a massive email campaign spreading similar ransom demands sent to banks and financial organizations across the word.
5,116
Threat Intelligence
May 29, 2019
Catching fish in muddy waters
How the hacker group MuddyWater attacked a Turkish manufacturer of military electronics
6,559

Webinars by Anastasia Tikhonova

High-Tech Crime Trends 2025 Deep Dive in APAC
On-Demand
March 18, 2025 · 1 hour 17 min
High-Tech Crime Trends 2025 Deep Dive in APAC
Join our experts on 3 April 2025 at 11 am GMT+8 for an in-depth analysis of global and APAC-speci...
Hi-Tech Crime Trends 2024 – Asia-Pacific
On-Demand
May 8, 2024 · 50 min
Hi-Tech Crime Trends 2024 – Asia-Pacific
Join us as we talk about why businesses in the region are ripe targets for exploitation, given th...