Matthieu Faou

News

ESET Discovers Winter Vivern Group Targeting Roundcube Webmail Servers

October 31, 2023

Editor

ESET researchers, during their regular monitoring of the cyberespionage operations of Winter Vivern, discovered that the group recently began exploiting a zero-day XSS vulnerability in the Roundcube Webmail server. In an XSS attack, malicious scripts are injected into otherwise trusted websites.

ESET Research discovers MoustachedBouncer

Cyber Security

ESET discovers a new cyberespionage group, MoustachedBouncer

August 14, 2023

Editor

ESET Research has discovered a new cyberespionage group, MoustachedBouncer. It is named after its presence in Belarus and is aligned with the interests of the local government. Active since at least 2014, the group targets only foreign embassies, including European ones, in Belarus.

Cyber Security

ESET discovers watering hole attacks on websites in the region

November 17, 2021

Editor

ESET researchers have discovered strategic web compromise (watering hole) attacks against high-profile websites in the Middle East, with a strong focus on Yemen. The attacks are linked to Candiru, a company that sells state-of-the-art offensive software tools and related services to government agencies.

Cyber Security

Number of APT groups exploiting the latest Exchange vulnerabilities grows

March 15, 2021

Editor

ESET Research has discovered that more than ten different advanced persistent threat (APT) groups are exploiting the recent Microsoft Exchange vulnerabilities to compromise email servers. ESET has identified more than 5,000 email servers that have been affected by malicious activity related to the incident.

News

LightNeuron malware can take control over email communications

May 8, 2019

Editor

ESET research today announced that it has uncovered LightNeuron, a Microsoft Exchange backdoor that can read, modify or block any email going through the mail server, and even compose new emails and send them under the identity of any legitimate user of the attackers’ choice.

Expert Corner

How to Avoid Falling for Online Betting Scams

January 30, 2025

Howsick

Phil Muncaster, guest writer at ESET, emphasizes don’t roll the dice on your online safety – watch out for bogus sports betting apps and other traps commonly set by scammers

ESET Discovers Winter Vivern Group Targeting Roundcube Webmail Servers

ESET discovers a new cyberespionage group, MoustachedBouncer

ESET discovers watering hole attacks on websites in the region

Number of APT groups exploiting the latest Exchange vulnerabilities grows

LightNeuron malware can take control over email communications

How to Avoid Falling for Online Betting Scams

Share this video