Chris Poulter

Seven in ten don’t trust social media companies to protect them from fraud ‼️ Reality is that cyber fraud is now an industrialised, platform-enabled phenomenon. Scammers leverage the same targeting and engagement tools legitimate advertisers use; the difference is that families and businesses bear the cost. Research commissioned by Bank of Ireland shows that seven in ten users distrust platform protection and over 90% want an end to profits from scam ads. ‘Not all social is social’, much of it is commercial, algorithmic and adversarial. The solution is safety by design, verifying financial advertisers, building friction and warnings into investment journeys, and enforcing clear accountability when systems enable harm. Bottom line - If platforms can target us to buy, they can target protections to keep us safe. Here we are at the launch - Baz Ashmawy, Nicola Sadlier (BOI Head of Fraud and me #cyberpsychology #cyberfraud #cyberscams 👉 Not all Social is Social #Ad Robert Hyland Heather Dawson Noel Kelly Julia Davidson OBE University of East London Paladin Capital Group Mike Steed Mark Maloney Christopher Steed Edward Albrigo Jamil Jaffer Raymond J. Hegarty Kenneth Pentimonti Mick Moran Steve Morgan Ralph Echemendia Dr Ludmila Morozova-Buss Capitol Technology University Bradford Sims, PhD, FRAeS Ed.D Diane M. Janosek, PhD, Esq. Tom Vazdar Elise Quevedo Amine Mcharek Marshall S. Rich Anastasios Arampatzis Barry O'Sullivan Florence Mottay Dr. Erick Miyares Ciaran O'Boyle Evangelos Markatos David Wright Alexey Kirichenko Robert Carroll Joachim Klerx

102

13 Comments

Fraud and Cyber Are Inseparable. In recent years, we’ve been developing the Group-IB #FraudMatrix — an integral part of our Fraud Protection solution. Inspired by the MITRE ATT&CK framework, which offers structured matrices for Enterprise, Mobile, and ICS threats, we’ve applied a similar methodology to the world of fraud. Group-IB Threat Intelligence brings together the systematic approach of MITRE ATT&CK with the deep domain knowledge of our FraudMatrix to offer a unified view of cyber and fraud threats. Threat actors who carry out cyberattacks are often closely linked to fraud operations. Their tactics, techniques, and procedures (TTPs) span both domains, making it essential to analyze them using a shared framework. Until now, this intersection was a blind spot—fraud and cyber were often treated separately, making it difficult to fully understand and respond to attackers' behavior. With the FraudMatrix, we now have a common language to map and explain how these actors operate across both vectors—closing the gap and enabling better defense. A big thank you to our clients and partners who have contributed to advancing the FraudMatrix and helping transform it into a universal language for describing fraudsters’ tactics and techniques. Together, we’ll continue shaping the future of threat intelligence.

132

4 Comments

Which countries originated the most cyber attacks in the last 90 days? External attacks never stop. This visualisation shows the top source countries for attacks targeting primarily Australian organisations over the last 90 days. As shown in the screenshot, on average, our SOC investigates 500 external attacks per week, often exceeding 1,000 during zero-day events. Before an alert reaches a human analyst, AI and use case algorithms have already triaged it, escalating only what's worthy of investigation. The volume of exploitation attempts never decreases, especially if the perimeter appears “generous” with open ICMP and other discoverable services. More than 95% of the attacks are benign, often resulting from "hackers" using the wrong tools, such as attempting to brute-force an SSH server with an email hacking tool. This constant background noise is why tracking baselines is non-negotiable. You must know what "normal" looks like to spot a real compromise. For example, expect ~300 unique attackers to begin probing for weaknesses within 30 minutes of an unwanted configuration change. The last visual shows allowed traffic and active network sessions for premium cyber assurance. This will enable analysts to hunt for the most evasive, stealthy threats and if a breach occurs, full session data is ready for immediate response and investigation. Mature organisations “assume a state of compromise,” operating as if a threat actor is already inside the network, hence collected evidence is non-negotiable. (Note, the US was excluded as it was dominating all charts)

30

Cyber threats don’t just target systems, they target people. In this powerful discussion, I’m joined by Jane Frankland, global cybersecurity leader and founder of the IN Security Movement, to explore how the real risk lies in human behaviour, leadership, and culture. 💡 We talk about: ☑️ What recent high-profile hacks reveal about today’s risk landscape ☑️ Why overconfidence and lack of preparation are a dangerous mix ☑️ The growing role of AI and how it’s changing the speed of attacks ☑️ Practical ways to build cyber resilience across your organisation 🎧 Listen here: https://lnkd.in/ej_s247J 📺 Or watch on YouTube: https://lnkd.in/evCG57DG Awareness is the first line of defence. Take the time to understand these risks before they understand you. --------- And if you’d like to keep the conversation going, join me at Risk Europe on 12–13 November at the ExCeL Centre in London. I’ll be hosting live podcast interviews, running on-stage seminars, and chatting with people at our stand. 🎟 Grab your free ticket here: https://lnkd.in/erDvSHmg ---------

52

11 Comments

In Mexico City in the summer of 2013, I was doing what most intelligence analysts do: manually piecing together threats from scattered sources, writing formulaic reports, and watching them collect dust. One person's brain. Limited sources. Static reports. The disconnect was obvious. Companies needed to operate safely in dynamic environments and emerging markets, but our intelligence was neither scientific nor comprehensive enough to truly protect them. That's the moment the idea for Base Operations was born. We built an AI-powered platform that does what human analysts can't. It aggregates multi-source threat data at scale, visualizes complex risk patterns, and turns intelligence into actionable insights to make decisions. Because protecting people and assets shouldn't depend on one analyst's capacity to sift every crime database, read every blog, and talk to every source. Today, security leaders use our platform to move beyond reactive response to proactive threat assessment. The kind that actually influences how organizations operate in high-risk environments.

80

2 Comments

There’s a clear mindset shift among those in the access control industry who are not stuck in yesterday’s ways. Kudos to the companies in the security industry that recognize what’s ahead and are prioritizing opportunity. Both incumbents and new entrants are leaning into it. It’s happening globally. And across the full stack: manufacturers, service providers, integrators, distributors, reps, and beyond. Yet, there’s still work to be done… here are 5 signs of where progress is needed. The Access Control Executive Brief

72

33 Comments