Award-winning news, views, and insight from the ESET security community
ESET Research
To the Moon and back(doors): Lunar landing in diplomatic missions
ESET researchers provide technical analysis of the Lunar toolset, likely used by the Turla APT group, that infiltrated a European ministry of foreign affairs
Filip Jurčacko • 15 May 2024
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain
One of the most advanced server-side malware campaigns is still growing, with hundreds of thousands of compromised servers, and it has diversified to include credit card and cryptocurrency theft
Marc-Etienne M.Léveillé • 14 May 2024
ESET Research, Threat Reports
ESET APT Activity Report Q4 2023–Q1 2024
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2023 and Q1 2024
Jean-Ian Boutin • 14 May 2024
eXotic Visit campaign: Tracing the footprints of Virtual Invaders
ESET researchers uncovered the eXotic Visit espionage campaign that targets users mainly in India and Pakistan with seemingly innocuous apps
Lukas Stefanko • 10 Apr 2024
Rescoms rides waves of AceCryptor spam
Insight into ESET telemetry statistics about AceCryptor in H2 2023 with a focus on Rescoms campaigns in European countries
Jakub Kaloč • 20 Mar 2024
Evasive Panda leverages Monlam Festival to target Tibetans
ESET researchers uncover strategic web compromise and supply-chain attacks targeting Tibetans
Anh Ho, Facundo Muñoz, Marc-Etienne M.Léveillé • 07 Mar 2024
ESET Research, Ukraine Crisis – Digital Security Resource Center
Operation Texonto: Information operation targeting Ukrainian speakers in the context of the war
A mix of PSYOPs, espionage and … fake Canadian pharmacies!
Matthieu Faou • 21 Feb 2024
VajraSpy: A Patchwork of espionage apps
ESET researchers discovered several Android apps carrying VajraSpy, a RAT used by the Patchwork APT group
Lukas Stefanko • 01 Feb 2024
ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora
An AI chatbot inadvertently kindles a cybercrime boom, ransomware bandits plunder organizations without deploying ransomware, and a new botnet enslaves Android TV boxes
ESET Research • 31 Jan 2024