ESET Research


2223 articles

ESET Research

Sathurbot: Distributed WordPress password attack

Sathurbot: Distributed WordPress password attack

ESET Research

Sathurbot: Distributed WordPress password attack

This article sheds light on the current ecosystem of the Sathurbot backdoor trojan, in particular exposing its use of torrents as a delivery medium and its distributed brute-forcing of weak WordPress administrator accounts.

ESET Research06 Apr 2017


Carbon Paper: Peering into Turla’s second stage backdoor

Carbon Paper: Peering into Turla’s second stage backdoor

Carbon Paper: Peering into Turla’s second stage backdoor

The Turla espionage group has been targeting various institutions for many years. Recently, ESET found several new versions of Carbon.

ESET Research30 Mar 2017


Scams

If you download Minecraft mods from Google Play, read on …

If you download Minecraft mods from Google Play, read on …

Scams

If you download Minecraft mods from Google Play, read on …

ESET researchers have discovered 87 malicious apps on Google Play disguised as mods for Minecraft.

Lukas Stefanko23 Mar 2017


ESET Research

New Instagram credential stealers discovered on Google Play

New Instagram credential stealers discovered on Google Play

ESET Research

New Instagram credential stealers discovered on Google Play

ESET researchers discovered 13 new Instagram credential stealers on Google play and looked into the motivations behind their fraudulent schemes.

Lukas Stefanko09 Mar 2017


ESET Research

Aggressive ad-displaying Google Play app tricks users into leaving high ratings

Aggressive ad-displaying Google Play app tricks users into leaving high ratings

ESET Research

Aggressive ad-displaying Google Play app tricks users into leaving high ratings

ESET researchers have observed an increased number of apps on Google Play using social engineering techniques to boost their ratings, ranging from legitimate apps, through adware to malware.

Lukas Stefanko08 Mar 2017


ESET Research

Released Android malware source code used to run a banking botnet

Released Android malware source code used to run a banking botnet

ESET Research

Released Android malware source code used to run a banking botnet

ESET researchers have discovered a new variant of botnet-forming Android banking malware based on source code made public a couple of months ago.

Lukas Stefanko23 Feb 2017


ESET Research

Sunny with a chance of stolen credentials: Malicious weather app found on Google Play

Sunny with a chance of stolen credentials: Malicious weather app found on Google Play

ESET Research

Sunny with a chance of stolen credentials: Malicious weather app found on Google Play

ESET has spotted a new banking malware on Google Play. Disguised as a weather forecast app, it steals banking credentials and locks screens.

Lukas Stefanko22 Feb 2017


Ransomware

New crypto-ransomware hits macOS

New crypto-ransomware hits macOS

Ransomware

New crypto-ransomware hits macOS

This last month we have seen a new ransomware for Mac. Written in Swift, it is distributed on BitTorrent distribution site as “Patcher” for pirating popular software.

Marc-Etienne M.Léveillé22 Feb 2017


ESET Research

RTM: Stealthy group targeting remote banking system

RTM: Stealthy group targeting remote banking system

ESET Research

RTM: Stealthy group targeting remote banking system

Today, ESET has released a white paper on RTM, a cybercrime group that has been relentlessly targeting businesses in Russia and neighboring countries.

Jean-Ian Boutin21 Feb 2017