APT‑C‑23 group evolves its Android spyware
ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East
Education: Masters in Informatic Engineering of the Technical University in Kosice
Highlights of your career? Malware Researcher
Position and history at ESET? Joined ESET as a Malware Researcher in 2011
What malware do you hate the most? Adware and ransomware
Favorite activities? Gym, squash, reading
What is your golden rule for cyberspace? Be reasonably paranoid
Favorite computer game/activity? Elasto Mania
ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East
Lukas StefankoESET research uncovers a malicious operation that both spies on victims and leaks their data
Lukas StefankoESET researchers dissect an Android app that masquerades as an official COVID-19 contact-tracing app and encrypts files on the victim's device
Lukas StefankoESET researchers detect a new way of misusing Accessibility Service, the Achilles’ heel of Android security
Lukas StefankoAfter being targeted by an Android DDoS app, ESET seized the opportunity to analyze the attack and to help put an end to it
Lukas StefankoESET researchers discovered a year-long adware campaign on Google Play and tracked down its operator. The apps involved, installed eight million times, use several tricks for stealth and persistence.
Lukas StefankoESET analysis breaks down the first known spyware that is built on the AhMyth open-source espionage tool and has appeared on Google Play – twice
Lukas StefankoESET researchers discover a new Android ransomware family that attempts to spread to victims’ contacts and deploys some unusual tricks
Lukas StefankoESET researchers discover fraudulent schemes piggybacking on the popularity of the face-modifying tool FaceApp, using a fake “Pro” version of the application as a lure
Lukas StefankoESET analysis uncovers a novel technique bypassing SMS-based two-factor authentication while circumventing Google’s recent SMS permissions restrictions
Lukas StefankoESET researchers have analyzed fake cryptocurrency wallets emerging on Google Play at the time of bitcoin’s renewed growth
Lukas StefankoAn interview with ESET malware researcher Lukáš Štefanko about Android banking malware, the topic of his latest white paper
Lukas StefankoCryptocurrency stealers that replace a wallet address in the clipboard are no longer limited to Windows or shady Android app stores
Lukas StefankoESET researchers discovered a new Android Trojan using a novel Accessibility-abusing technique that targets the official PayPal app, and is capable of bypassing PayPal’s two-factor authentication
Lukas StefankoFitness-tracking apps use dodgy in-app payments to steal money from unaware iPhone and iPad users
Lukas StefankoThe malicious apps have all been removed from the official Android store but not before the apps were installed by almost 30,000 users
Lukas StefankoCybercrooks use bogus apps to phish six online banks and a cryptocurrency exchange
Lukas StefankoFraudsters are using bogus apps to convince users of three Indian banks to divulge their personal data
Lukas StefankoEntirely new malware family discovered by ESET researchers
Lukas StefankoTricksters have been misleading users about the functionality of apps by displaying bogus download numbers
Lukas Stefanko