Latest Articles

Fake call logs, real payments: How CallPhantom tricks Android users

Fake call logs, real payments: How CallPhantom tricks Android users

Fake call logs, real payments: How CallPhantom tricks Android users

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down

Lukas Stefanko07 May 2026


Fixing the password problem is as easy as 123456

Fixing the password problem is as easy as 123456

Fixing the password problem is as easy as 123456

How come it’s still possible to ‘secure’ an online account with a six-digit string?

Tony Anscombe07 May 2026


A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games

Filip Jurčacko05 May 2026


This month in security with Tony Anscombe – April 2026 edition

This month in security with Tony Anscombe – April 2026 edition

This month in security with Tony Anscombe – April 2026 edition

Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month

Editor30 Apr 2026


The calm before the ransom: What you see is not all there is

The calm before the ransom: What you see is not all there is

The calm before the ransom: What you see is not all there is

A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability

Tomáš Foltýn24 Apr 2026


GopherWhisper: A burrow full of malware

GopherWhisper: A burrow full of malware

GopherWhisper: A burrow full of malware

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions

Eric Howard23 Apr 2026


New NGate variant hides in a trojanized NFC payment app

New NGate variant hides in a trojanized NFC payment app

New NGate variant hides in a trojanized NFC payment app

ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI

Lukas Stefanko21 Apr 2026


What the ransom note won’t say

What the ransom note won’t say

What the ransom note won’t say

An attack is what you see, but a business operation is what you’re up against

Tomáš Foltýn20 Apr 2026


That data breach alert might be a trap

That data breach alert might be a trap

That data breach alert might be a trap

Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.

Phil Muncaster17 Apr 2026


Supply chain dependencies: Have you checked your blind spot?

Supply chain dependencies: Have you checked your blind spot?

Supply chain dependencies: Have you checked your blind spot?

Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience?

Tony Anscombe16 Apr 2026


Recovery scammers hit you when you’re down: Here’s how to avoid a second strike

Recovery scammers hit you when you’re down: Here’s how to avoid a second strike

Recovery scammers hit you when you’re down: Here’s how to avoid a second strike

If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.

Phil Muncaster10 Apr 2026


As breakout time accelerates, prevention-first cybersecurity takes center stage

As breakout time accelerates, prevention-first cybersecurity takes center stage

As breakout time accelerates, prevention-first cybersecurity takes center stage

Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.

Phil Muncaster07 Apr 2026


Apt Activity Report
MDR Protection