The cybercrime group XE Group has transitioned from credit card skimming to targeted information theft.XE Group has shifted its focus to exploiting zero-day vulnerabilities in supply chain attacks.The group used a VeraCore zero-day to deploy reverse shells and web shells in recent attacks.XE Group employs advanced tactics, including supply chain attacks and obfuscated executables disguised as PNG files.