ESET researchers

News

ESET Discovers eXotic Visit Campaign Targeting Android Users

April 26, 2024

Editor

ESET researchers have discovered an active espionage campaign targeting Android users with apps primarily posing as messaging services. While these apps offer functional services as bait, they are bundled with the open-source XploitSPY malware.

News

ESET Reveals Espionage Apps On The Attack In Pakistan

February 5, 2024

Editor

ESET researchers have identified 12 Android espionage apps that share the same malicious code; six were available on Google Play. All the observed applications were advertised as messaging tools, apart from one that posed as a news app.

Cyber Security

SpyLoan Apps Expand Their Range to Android, ESET Reveals

December 18, 2023

Editor

ESET researchers have observed alarming growth in deceptive Android loan apps, which present themselves as legitimate personal loan services, promising quick and easy access to funds. Despite their attractive appearance, these services are, in fact, designed to defraud users

News

ESET reveals AceCryptor hits computers 10,000 times every month

May 30, 2023

Editor

ESET researchers have revealed details about a prevalent cryptor malware, AceCryptor, which operates as a cryptor-as-a-service used by tens of malware families. This threat has been around since 2016, and has been distributed worldwide, with multiple threat actors

Cyber Security

ESET discover Lazarus Operation DreamJob campaign targeting Linux users

May 9, 2023

Editor

ESET researchers have discovered a new Lazarus Operation DreamJob campaign targeting Linux users. ESET Research was able to reconstruct the full chain, from the ZIP file that delivers a fake HSBC job offer as a decoy up until the final payload: the SimplexTea Linux backdoor distributed through an OpenDrive cloud storage account.

Cyber Security

Hackers stealing crypto funds using trojanized Telegram and WhatsApp

March 23, 2023

Editor

ESET researchers have discovered dozens of copycat Telegram and WhatsApp websites targeting mainly Android and Windows users with trojanized versions of these instant messaging apps. Most of the malicious apps we identified are clippers

Cyber Security

Cyberespionage honey-trap campaign targeting officials in India and Pakistan

March 9, 2023

Editor

ESET researchers have analyzed a cyberespionage campaign distributing CapraRAT backdoors through trojanized and supposedly “secure” Android messaging apps that exfiltrate sensitive information.

News

North Korean APT group stealing data for Command and Control communication

December 5, 2022

Editor

ESET researchers analyzed a previously unreported sophisticated backdoor used by the ScarCruft APT group. The backdoor, which ESET named Dolphin, has a wide range of spying capabilities, including monitoring drives and portable devices,

News

ESET reveals Furball spyware goes after Iranian citizens

October 27, 2022

Editor

ESET researchers recently identified a new version of the Android malware FurBall being used in a Domestic Kitten campaign conducted by the APT-C-50 group. The Domestic Kitten campaign is known to conduct mobile surveillance operations against Iranian citizens, and this new FurBall version

Industrial Security

Industroyer first ever malware designed to attack power grids

June 16, 2022

Editor

André Lameiras, security writer at ESET takes a walk into his memory lane and goes back five years ago, when ESET researchers released their analysis of the first ever malware that was designed specifically to attack power grids

Cyber Security

Lazarus misuses LinkedIn and WhatsApp to attack aerospace and defense contractors

June 1, 2022

Editor

During the annual ESET World conference, ESET researchers have been presenting about a new investigation into the infamous Lazarus APT group. Director of ESET Threat Research Jean-Ian Boutin went over various new campaigns perpetrated by the Lazarus group

News

ESET researchers investigate APT group Donot Team

January 21, 2022

Editor

ESET researchers have uncovered recent campaigns and an updated threat arsenal of the infamous APT group Donot Team (also known as APT-C-35 and SectorE02). According to research findings, the group is very persistent and has consistently targeted the same organizations for at least the last two years.

Expert Corner

How to Avoid Falling for Online Betting Scams

January 30, 2025

Howsick

Phil Muncaster, guest writer at ESET, emphasizes don’t roll the dice on your online safety – watch out for bogus sports betting apps and other traps commonly set by scammers

Share this video