Masked Actors
Podcast Series

As the threat landscape evolves, knowing your adversaries is critical. Group-IB is introducing Masked Actors - 2025’s most prolific cybercriminal groups.
Listen to all the episodes

All podcasts episodes

oilrig default image
oilrig hover image
Recommended
Episode #6
October 28, 2025
23 min 41 sec
MuddyWater & OilRig: The Cyber Espionage Playbook

In this episode, we unearth how MuddyWater and OilRig groups operate and what organizations and governments should be doing to protect themselves against state-sponsored threats.

Joystick to Jailbreak
Episode #5
September 23, 2025
73 min 41 sec
Joystick to Jailbreak: Exploring the Youth Cybercrime Pandemic

This episode unpacks the motivations driving young hackers, the pathway from gaming to cybercrime, and the urgent need to rethink how we recruit and inspire the next generation of cybersecurity defenders.

ransomhub
Episode #4
August 27, 2025
40 min 05 sec
RansomHub: From RaaS Kingpin to Cartel Mystery

In this episode, we explore how RansomHub’s affiliate-friendly model disrupted the RaaS market, why its tactics proved so effective, and where its members may have gone.

dragon force
Episode #3
July 29, 2025
29 min 33 sec
DragonForce: The Cyber Cartel Helping Hackers Hit the High Street

In this episode, we unpack how DragonForce evolved into a ransomware cartel, franchising their malware to affiliates like Scattered Spider, whose sophisticated social engineering tactics have significantly disrupted UK retail.

lazarus
lazarus
Episode #2
June 11, 2025
36 min 38 sec
Lazarus: The State-Sponsored Hackers Who Never Log Off

North Korea’s most notorious APT group is evolving fast and staying invisible. They’ve breached banks, hospitals, governments, and crypto exchanges and they’re still active.

golden factory
Episode #1
May 13, 2025
36 min 38 sec
GoldFactory: The Cybercriminals Who Want to Steal Your Face

Meet GoldFactory — an elusive, Chinese-speaking cybercrime group operating in Asia. They’re behind GoldPickaxe, the first-ever iOS banking Trojan, and they’re using deepfakes to bypass biometric security.

Subscribe to Masked Actors Series