Cyber Security

Chinese APT Gelsemium Targets Linux Systems with WolfsBane Backdoor

November 27, 2024

Editor

0

0

ESET researchers have identified multiple samples of a Linux backdoor, which they named WolfsBane and attribute highly to Gelsemium, a China-aligned advanced persistent threat (APT) group. The backdoors and tools discovered are intended for cyberespionage

Read more

Cyber Security

ESET Discovers China-aligned APT Group CeranaKeeper Targets Thai Government

October 7, 2024

Editor

0

0

ESET researchers have discovered several targeted campaigns against governmental institutions in Thailand, starting in 2023, where massive amounts of data have been exfiltrated. The campaigns misused legitimate file-sharing services such as Dropbox, PixelDrain, GitHub,

Read more

News

Arid Viper Group Targets Middle East

June 20, 2024

Editor

0

0

ESET researchers have identified five campaigns that employ trojanized apps to target Android users. Most likely carried out by the Arid Viper APT group, these campaigns started in 2022, and three of them are still ongoing at the time of publication of this press release.

Read more

Cyber Security

China-Aligned APT Group Evasive Panda Targets Tibetans

March 13, 2024

Editor

0

0

ESET researchers have discovered a cyberespionage campaign that, since at least September 2023, has been victimizing Tibetans via a targeted watering hole (also known as a strategic web compromise), and a supply-chain compromise to deliver trojanized installers of Tibetan language translation software.

Read more

Cyber Security

Cyberespionage honey-trap campaign targeting officials in India and Pakistan

March 9, 2023

Editor

0

0

ESET researchers have analyzed a cyberespionage campaign distributing CapraRAT backdoors through trojanized and supposedly “secure” Android messaging apps that exfiltrate sensitive information.

Read more

News

APT group Lazarus maybe back using WinorDLL64 backdoor to exfiltrate data

February 28, 2023

Editor

0

0

ESET researchers have discovered the WinorDLL64 backdoor, one of the payloads of the Wslink downloader. The targeted region, and overlap in behavior and code, suggest the tool is used by the infamous North Korea-aligned APT group Lazarus.

Read more

News

ESET identifies APT group StrongPity targeting Android users

January 12, 2023

Editor

0

0

ESET researchers identified an active StrongPity APT group campaign leveraging a fully functional but trojanized version of the legitimate Telegram app, which despite being non-existent, has been repackaged as „the“ Shagle app.

Read more

Cyber Security

ESET Research discovers Hodur malware

March 25, 2022

Editor

0

0

ESET Research discovered a still-ongoing cyberespionage campaign using a previously undocumented Korplug variant by the Mustang Panda APT group. This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malware

Read more

News

ESET researchers investigate APT group Donot Team

January 21, 2022

Editor

0

0

ESET researchers have uncovered recent campaigns and an updated threat arsenal of the infamous APT group Donot Team (also known as APT-C-35 and SectorE02). According to research findings, the group is very persistent and has consistently targeted the same organizations for at least the last two years.

Read more

Industrial Security

New malware targets thousands of ICS computers around the world

December 16, 2021

Editor

0

0

From January 20 to November 10, 2021, Kaspersky experts uncovered a new piece of malware that has targeted more than 35,000 computers across 195 countries. Dubbed “PseudoManuscrypt” for its similarities with the advanced persistent threat (APT) group Lazarus’ Manuscrypt malware,

Read more

Cyber Security

New APT group BackdoorDiplomacy targets diplomats in the region

June 10, 2021

Editor

0

0

ESET Research has uncovered a new APT group BackdoorDiplomacy that primarily targets Ministries of Foreign Affairs in the Middle East and Africa, and less frequently, telecommunication companies. Their attacks usually start by exploiting vulnerable internet-exposed applications on webservers in order to install a custom backdoor that ESET is calling Turian. 

Read more

Cyber Security

LuckyMouse APT group targeting governments

May 4, 2021

Editor

0

0

The cyber threats such as cyberespionage, ransomware and supply-chain attacks are on the rise and above all, the most formidable challenge, and foe, shared by all governments is advanced persistent threat (APT) groups. 

Read more