ESET Research


2300 articles

Android ransomware is back

Android ransomware is back

Android ransomware is back

ESET researchers discover a new Android ransomware family that attempts to spread to victims’ contacts and deploys some unusual tricks

Lukas Stefanko29 Jul 2019


With FaceApp in the spotlight, new scams emerge

With FaceApp in the spotlight, new scams emerge

With FaceApp in the spotlight, new scams emerge

ESET researchers discover fraudulent schemes piggybacking on the popularity of the face-modifying tool FaceApp, using a fake “Pro” version of the application as a lure

Lukas Stefanko19 Jul 2019


Okrum: Ke3chang group targets diplomatic missions

Okrum: Ke3chang group targets diplomatic missions

Okrum: Ke3chang group targets diplomatic missions

Tracking the malicious activities of the elusive Ke3chang APT group, ESET researchers have discovered new versions of malware families linked to the group, and a previously unreported backdoor

Zuzana Hromcová18 Jul 2019


Buhtrap group uses zero-day in latest espionage campaigns

Buhtrap group uses zero-day in latest espionage campaigns

Buhtrap group uses zero-day in latest espionage campaigns

ESET research reveals notorious crime group also conducting espionage campaigns for the past five years

Jean-Ian Boutin11 Jul 2019


Windows zero-day CVE-2019-1132 exploited in targeted attacks

Windows zero-day CVE-2019-1132 exploited in targeted attacks

Windows zero-day CVE-2019-1132 exploited in targeted attacks

ESET research discovers a zero-day exploit that takes advantage of a local privilege escalation vulnerability in Windows

Anton Cherepanov10 Jul 2019


Malicious campaign targets South Korean users with backdoor-laced torrents

Malicious campaign targets South Korean users with backdoor-laced torrents

Malicious campaign targets South Korean users with backdoor-laced torrents

ESET researchers have discovered a malicious campaign distributing a backdoor via torrents, with Korean TV content used as a lure

Zuzana Hromcová08 Jul 2019


LoudMiner: Cross-platform mining in cracked VST software

LoudMiner: Cross-platform mining in cracked VST software

LoudMiner: Cross-platform mining in cracked VST software

The story of a Linux miner bundled with pirated copies of VST (Virtual Studio Technology) software for Windows and macOS

ESET Research and Michal Malik20 Jun 2019


Malware sidesteps Google permissions policy with new 2FA bypass technique

Malware sidesteps Google permissions policy with new 2FA bypass technique

Malware sidesteps Google permissions policy with new 2FA bypass technique

ESET analysis uncovers a novel technique bypassing SMS-based two-factor authentication while circumventing Google’s recent SMS permissions restrictions

Lukas Stefanko17 Jun 2019


Wajam: From start-up to massively-spread adware

Wajam: From start-up to massively-spread adware

Wajam: From start-up to massively-spread adware

How a Montreal-made "social search engine" application has managed to become widely-spread adware, while escaping consequences

ESET Research05 Jun 2019