ESET Research


2223 articles

Critical Infrastructure, Ukraine Crisis – Digital Security Resource Center

TeleBots are back: Supply-chain attacks against Ukraine

TeleBots are back: Supply-chain attacks against Ukraine

Critical Infrastructure, Ukraine Crisis – Digital Security Resource Center

TeleBots are back: Supply-chain attacks against Ukraine

This blogpost reveals many details about the Diskcoder.C (aka ExPetr or NotPetya) outbreak and related information about previously unpublished attacks.

Anton Cherepanov30 Jun 2017


ESET Research, Ransomware

New WannaCryptor-like ransomware attack hits globally: All you need to know

New WannaCryptor-like ransomware attack hits globally: All you need to know

ESET Research, Ransomware

New WannaCryptor-like ransomware attack hits globally: All you need to know

Numerous reports are coming out on social media about a new ransomware attack in Ukraine, which could be related to the Petya family.

Editor27 Jun 2017


ESET Research

Birthday Reminder looks benign but the devil’s in the details: Hooks DNS, serves dodgy ads

Birthday Reminder looks benign but the devil’s in the details: Hooks DNS, serves dodgy ads

ESET Research

Birthday Reminder looks benign but the devil’s in the details: Hooks DNS, serves dodgy ads

The strange behavior of a simple Windows application caught our attention and sparked the analysis by ESET of a previously undocumented malware.

Marc-Etienne M.Léveillé22 Jun 2017


ESET Research, Critical Infrastructure, Ukraine Crisis – Digital Security Resource Center

Industroyer: Biggest threat to industrial control systems since Stuxnet

Industroyer: Biggest threat to industrial control systems since Stuxnet

ESET Research, Critical Infrastructure, Ukraine Crisis – Digital Security Resource Center

Industroyer: Biggest threat to industrial control systems since Stuxnet

ESET has analyzed a sophisticated and extremely dangerous malware, known as Industroyer, which is designed to disrupt critical industrial processes.

Anton Cherepanov and Robert Lipovsky12 Jun 2017


ESET Research

Turla’s watering hole campaign: An updated Firefox extension abusing Instagram

Turla’s watering hole campaign: An updated Firefox extension abusing Instagram

ESET Research

Turla’s watering hole campaign: An updated Firefox extension abusing Instagram

The Turla espionage group is still using watering hole techniques to redirect potentially interesting victims to their C&C infrastructure.

Jean-Ian Boutin06 Jun 2017


ESET Research

Sednit adds two zero-day exploits using 'Trump's attack on Syria' as a decoy

Sednit adds two zero-day exploits using 'Trump's attack on Syria' as a decoy

ESET Research

Sednit adds two zero-day exploits using 'Trump's attack on Syria' as a decoy

Sednit is back - this time with two more zero-day exploits embedded in a phishing email titled Trump's_Attack_on_Syria_English.docx.

ESET Research09 May 2017


Linux Shishiga malware using LUA scripts

Linux Shishiga malware using LUA scripts

Linux Shishiga malware using LUA scripts

The usage of the BitTorrent protocol and Lua modules separates Linux/Shishiga from other types of malware, according to analysis by ESET.

ESET Research and Michal Malik25 Apr 2017


ESET Research

Turn the light on and give me your passwords!

Turn the light on and give me your passwords!

ESET Research

Turn the light on and give me your passwords!

ESET researchers have discovered another banking trojan on Google Play targeting Android users – this time disguised as a Flashlight widget.

Lukas Stefanko19 Apr 2017


Scams

Real or virtual currency? Scammers accept both

Real or virtual currency? Scammers accept both

Scams

Real or virtual currency? Scammers accept both

ESET researchers have discovered and reported scammers stealing PayPal and Paxful credentials disguised as a tool for YouTube monetization, and a bitcoin trading marketplace.

Lukas Stefanko13 Apr 2017