Cybersecurity research and insight for the AI era · Moving soon to the ESET Blog
Cybersecurity research and insight for the AI era · <a href='https://www.eset.com/blog/en/' target='_blank'>Moving soon to the ESET Blog</a>
Anton Cherepanov and Peter Strýček • 22 Oct 2026 • 16 min. read
ESET Research
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Fernando Tavella • 08 Oct 2026 • 15 min. read
MATCHBOIL: New tricks, same old evil intentions
Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. read
Beware the SparroWock: The backdoor that bites, the commands that catch
Business Security
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
Privacy
What to consider before asking an AI chatbot for health advice
Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe.
Phil Muncaster • 27 May 2026
Malware
BTMOB: A stealthy RAT burrowing deep into Android devices
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise
Daniel Cunha Barbosa • 26 May 2026
Digital Security
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data
Christian Ali Bravo • 22 May 2026
Webworm: New burrowing techniques
ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal
Eric Howard • 20 May 2026
The quest for greater tech independence
A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require nations and companies to reassess their relationships and dependencies
Andy Garth • 19 May 2026
Why geopolitical turmoil is a gift for scammers, and how to stay safe
Conflict is a boon for opportunistic fraudsters. Look out for their ploys.
Phil Muncaster • 15 May 2026
FrostyNeighbor: Fresh mischief and digital shenanigans
ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations
Damien Schaeffer • 14 May 2026
Eyes wide open: How to mitigate the security and privacy risks of smart glasses
Smart glasses allow anyone to track and record the world around them. That could put your data and the privacy of those nearby at risk.
Phil Muncaster • 11 May 2026
Fake call logs, real payments: How CallPhantom tricks Android users
ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down
Lukas Stefanko • 07 May 2026
Fixing the password problem is as easy as 123456
How come it’s still possible to ‘secure’ an online account with a six-digit string?
Tony Anscombe • 07 May 2026
A rigged game: ScarCruft compromises gaming platform in a supply-chain attack
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games
Filip Jurčacko • 05 May 2026
Video
This month in security with Tony Anscombe – April 2026 edition
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month
Editor • 30 Apr 2026
Sign up for our newsletters