ESET researchers have identified multiple samples of a Linux backdoor, which they named WolfsBane and attribute highly to Gelsemium, a China-aligned advanced persistent threat (APT) group. The backdoors and tools discovered are intended for cyberespionageRead More…
ESET Research has discovered a cluster of malicious Python projects being distributed via PyPI, the official Python (programming language) package repository. The threat targets both Windows and Linux systems and usually delivers a custom backdoor with cyberespionage capabilities.Read More…
During the annual Cyber Security Weekend 2023 for the Middle East, Turkiye and Africa which was recently held in Almaty, Kazakhstan Kaspersky researchers announced the discovery of a series of attacks by a new malware supposedly developed by the infamous OilRig Advanced Persistent Threat (APT) group that has been active in theRead More…
James Shepperd, Content Manager at ESET takes a quick dive into the murky world of cyberespionage and other growing threats facing managed service providers – and their customersRead More…
ESET researchers have analyzed a cyberespionage campaign distributing CapraRAT backdoors through trojanized and supposedly “secure” Android messaging apps that exfiltrate sensitive information.Read More…
ESET Research discovered a still-ongoing cyberespionage campaign using a previously undocumented Korplug variant by the Mustang Panda APT group. This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malwareRead More…
ESET released today its T2 2021 Threat Report highlighting several concerning trends, including increasingly aggressive ransomware tactics, intensifying brute-force attacks, and deceptive phishing campaigns targeting people working from home who have gotten used to performing many administrative tasks remotely.Read More…
ESET researchers have discovered a set of 10 previously undocumented malware families, implemented as malicious extensions for Internet Information Services (IIS) web server software. Targeting both government mailboxes and e-commerce credit card transactions,Read More…
ESET researchers discovered a new supply-chain attack compromising the update mechanism of NoxPlayer, an Android emulator for PCs and Macs. Three different malware families were spotted being distributed from tailored malicious updates to selected victimsRead More…
ESET researchers have discovered and analyzed malware that targets Voice over IP (VoIP) softswitches. This new malware, named CDRThief by ESET, is designed to target a very specific VoIP platform used by two China-made softswitches (software switches): Linknat VOS2009 and VOS3000.Read More…
Kaspersky Lab researchers have detected multiple attempts to infect foreign diplomatic entities in Iran with homebrew spyware. The attacks appear to be using an updated Remexi backdoor. Several legitimate tools were also used during the campaign.Read More…
