ESET Research

News

ESET Reveals Ebury group Compromised 400k Linux Servers

May 17, 2024

Editor

ESET Research released today its deep-dive investigation into one of the most advanced server-side malware campaigns, which is still growing and has seen hundreds of thousands of compromised servers in its at least 15-year-long operation.

Cyber Security

Malicious Python Projects Targeting Windows, Linux Systems

December 27, 2023

Editor

ESET Research has discovered a cluster of malicious Python projects being distributed via PyPI, the official Python (programming language) package repository. The threat targets both Windows and Linux systems and usually delivers a custom backdoor with cyberespionage capabilities.

Cyber Security

Infamous IoT Botnet Mozi Taken Down Via A Kill Switch

November 3, 2023

Editor

ESET Research recently observed the sudden demise of one of the most prolific Internet of Things (IoT) botnets, named Mozi, infamous for exploiting vulnerabilities in hundreds of thousands of IoT devices each year.

Cyber Security

ESET Says The Infamous Botnet Emotet Makes A Comeback

July 20, 2023

Editor

ESET Research has published a summary of what happened with the Emotet botnet since its comeback after a limited takedown. Emotet is a malware family active since 2014, operated by a cybercrime group known as Mealybug or TA542. Although it started as a banking trojan, it later evolved into a botnet

Cyber Security

ESET reveals iRecorder spies on its users

June 8, 2023

Editor

ESET researchers have discovered a trojanized Android app named iRecorder – Screen Recorder. It was available on Google Play as a legitimate app in September 2021, with malicious functionality most likely added in August 2022. During its existence, the app was installed on more than 50,000 devices.

Cyber Security

ESET Research analyzes UEFI bootkit, BlackLotus

March 6, 2023

Editor

ESET researchers are the first to publish an analysis of a UEFI bootkit that is capable of bypassing an essential platform security feature – UEFI Secure Boot. The functionality of the bootkit and its individual features make ESET Research believe that it is a threat known as BlackLotus,

News

Russian APT groups continues to attack Ukraine with wipers and ransomware

February 1, 2023

Editor

ESET Research released its latest APT Activity Report, which summarizes discoveries about select advanced persistent threat (APT) groups that were observed, investigated, and analyzed by ESET researchers between September and the end of December (T3) 2022.

News

ESET identifies APT group StrongPity targeting Android users

January 12, 2023

Editor

ESET researchers identified an active StrongPity APT group campaign leveraging a fully functional but trojanized version of the legitimate Telegram app, which despite being non-existent, has been repackaged as „the“ Shagle app.

News

ESET researchers identifies Bahamut group targeting Android users with fake VPN apps

November 30, 2022

Editor

ESET researchers have identified an active campaign targeting Android users, conducted by the Bahamut APT group. This campaign has been ongoing since the start of this year. Malicious spyware apps are distributed through a fake SecureVPN website that provides only trojanized Android apps to download.

Cyber Security

ESET researchers presented Industroyer2 malware at Black Hat USA

September 6, 2022

Editor

ESET researchers Robert Lipovský and Anton Cherepanov recently presented breakthrough research into Industroyer2 during a Black Hat conference in Las Vegas, along with Victor Zhora, the Deputy Director of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP).

News

ESET discovers smartphones not safe for cryptocurrency

April 13, 2022

Editor

ESET Research discovered and backtracked a sophisticated malicious cryptocurrency scheme that targets mobile devices using Android or iOS operating systems (iPhones). Malicious apps are distributed through fake websites, mimicking legitimate wallet services

Cyber Security

ESET Research discovers Hodur malware

March 25, 2022

Editor

ESET Research discovered a still-ongoing cyberespionage campaign using a previously undocumented Korplug variant by the Mustang Panda APT group. This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malware

Expert Corner

How Frequently Should You Change Your Passwords?

April 22, 2024

Editor

Phil Muncaster, the guest writer at ESET, probes whether that is the right question to ask and suggests what else you should consider when it comes to keeping your accounts safe.

Share this video