ESET Research

ESET Research



624 articles by ESET Research

DynoWiper update: Technical analysis and attribution

DynoWiper update: Technical analysis and attribution

DynoWiper update: Technical analysis and attribution

ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector

ESET Research30 Jan 202611 min. read


ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper

ESET Research23 Jan 20262 min. read


MuddyWater: Snakes by the riverbank

MuddyWater: Snakes by the riverbank

MuddyWater: Snakes by the riverbank

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook

ESET Research02 Dec 202520 min. read


ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

Threat actors are embracing ClickFix, ransomware gangs are turning on each other – toppling even the leaders – and law enforcement is disrupting one infostealer after another

ESET Research05 Aug 20251 min. read


ToolShell: An all-you-can-eat buffet for threat actors

ToolShell: An all-you-can-eat buffet for threat actors

ToolShell: An all-you-can-eat buffet for threat actors

ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities

ESET Research24 Jul 20253 min. read


ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET experts discuss Sandworm’s new data wiper, relentless campaigns by UnsolicitedBooker, attribution challenges amid tool-sharing, and other key findings from the latest APT Activity Report

ESET Research01 Jul 20252 min. read


BladedFeline: Whispering in the dark

BladedFeline: Whispering in the dark

BladedFeline: Whispering in the dark

ESET researchers analyzed a cyberespionage campaign conducted by BladedFeline, an Iran-aligned APT group with likely ties to OilRig

ESET Research05 Jun 202525 min. read


Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Big shifts in the infostealer scene, novel attack vector against iOS and Android, and a massive surge in investment scams on social media

ESET Research28 Feb 20251 min. read


ESET Research Podcast: Telekopye, again

ESET Research Podcast: Telekopye, again

ESET Research Podcast: Telekopye, again

Take a peek into the murky world of cybercrime where groups of scammers who go by the nickname of 'Neanderthals’ wield the Telekopye toolkit to ensnare unsuspecting victims they call 'Mammoths'

ESET Research20 Dec 20241 min. read