Get 24/7 incident response assistance from our global team
Please review the following rules before submitting your application:
1. Our main objective is to foster a community of like-minded individuals dedicated to combatting cybercrime and who have never engaged in Blackhat activities.
2. All applications must include research or a research draft. You can find content criteria in the blog. Please provide a link to your research or research draft using the form below.
Your guide to AI innovation, adoption, and acceleration in cybersecurity
The High-Tech Crime Trends Report 2026 reveals how this shift has industrialized cybercrime, exposed the limits of perimeter-based defenses, and elevated identity and trust as the new primary attack surfaces.
Your guide to AI innovation, adoption, and acceleration in cybersecurity
Learn more
The Asia-Pacific region remains a primary target for the world’s most motivated threat actors. Group-IB’s January 2026 Insights provides a deep dive into four critical pillars: ransomware, hacktivism, compromised accounts, and financial fraud.
Unlike aggregated open-source reports, this intelligence is drawn directly from Group-IB’s proprietary telemetry, dark web monitoring, and infostealer tracking. Whether you are a CISO or a SOC analyst, this report provides the primary research needed to move from reactive to proactive defense.
Ransomware Activity Falls 46%, but Malaysia Emerges as the New Primary TargetAdversary To Watch: The GentlemenGeopolitically Motivated Groups Remain Active.The Infrastructure Destruction Squad’s Focus on Operational Technology (OT) and Smart ManufacturingThe Migration to Telegram in Financial FraudQilin is currently the most active group. While overall incidents are down, groups like The Gentlemen are increasing their activity, specifically targeting manufacturing in Malaysia.
India leads the region in DDoS and compromised account volume. However, Malaysia has seen a sharp spike in ransomware targeting, and Japan remains a top target for financial fraud.
Vidar is the dominant malware family in APAC, responsible for nearly half of all stolen credentials. It primarily targets passwords and session cookies, allowing actors to bypass MFA.
The move to Telegram (71.2% of distribution) allows criminals to automate sales via bots and reach a wider audience with less risk of takedowns compared to traditional web-based forums.
An essential 15-minute read for APAC Security and Risk Professionals.
This free report is built for:
Chief Information Security Officers (CISOs), Chief Information Officers (CIOs) and Heads of Security. Fraud, Risk and Compliance Leaders.Government and Law Enforcement Professionals. Security Operation Center (SOC), Incident Response (IR) and Threat Intelligence (TI) Teams. Board Level and Executive Decision Makers.
If you are responsible for protecting digital assets, customers or national infrastructure in APAC, this report is for you.
We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields:
