ESET Research


2300 articles

Analysis of the latest Emotet propagation campaign

Analysis of the latest Emotet propagation campaign

Analysis of the latest Emotet propagation campaign

An analysis of the workings of this new Emotet campaign, which has affected various countries in Latin America by taking advantage of Microsoft Office files to hide its malicious activity

Diego Perez28 Dec 2018


Android Trojan steals money from PayPal accounts even with 2FA on

Android Trojan steals money from PayPal accounts even with 2FA on

Android Trojan steals money from PayPal accounts even with 2FA on

ESET researchers discovered a new Android Trojan using a novel Accessibility-abusing technique that targets the official PayPal app, and is capable of bypassing PayPal’s two-factor authentication

Lukas Stefanko11 Dec 2018


DanaBot evolves beyond banking Trojan with new spam-sending capability

DanaBot evolves beyond banking Trojan with new spam-sending capability

DanaBot evolves beyond banking Trojan with new spam-sending capability

ESET research shows that DanaBot operators have been expanding the malware’s scope and possibly cooperating with another criminal group

ESET Research06 Dec 2018


The Dark Side of the ForSSHe

The Dark Side of the ForSSHe

The Dark Side of the ForSSHe

ESET researchers discovered a set of previously undocumented Linux malware families based on OpenSSH. In the white paper, “The Dark Side of the ForSSHe”, they release analysis of 21 malware families to improve the prevention, detection and remediation of such threats

Marc-Etienne M.Léveillé05 Dec 2018


Scam iOS apps promise fitness, steal money instead

Scam iOS apps promise fitness, steal money instead

Scam iOS apps promise fitness, steal money instead

Fitness-tracking apps use dodgy in-app payments to steal money from unaware iPhone and iPad users

Lukas Stefanko03 Dec 2018


3ve – Major online ad fraud operation disrupted

3ve – Major online ad fraud operation disrupted

3ve – Major online ad fraud operation disrupted

International law enforcement swoops on fake ad viewing outfit

Jean-Ian Boutin27 Nov 2018


Black Friday and Cyber Monday by Emotet: Filling inboxes with infected XML macros

Black Friday and Cyber Monday by Emotet: Filling inboxes with infected XML macros

Black Friday and Cyber Monday by Emotet: Filling inboxes with infected XML macros

Emotet starts another massive spam campaign just as the shopping season picks up steam

Ondrej Kubovič23 Nov 2018


Sednit: What’s going on with Zebrocy?

Sednit: What’s going on with Zebrocy?

Sednit: What’s going on with Zebrocy?

In August 2018, Sednit’s operators deployed two new Zebrocy components, and since then we have seen an uptick in Zebrocy deployments, with targets in Central Asia, as well as countries in Central and Eastern Europe, notably embassies, ministries of foreign affairs, and diplomats

ESET Research20 Nov 2018


OceanLotus: New watering hole attack in Southeast Asia

OceanLotus: New watering hole attack in Southeast Asia

OceanLotus: New watering hole attack in Southeast Asia

ESET researchers identified 21 distinct websites that had been compromised including some particularly notable government and media sites

Matthieu Faou20 Nov 2018