ESET Research


2300 articles

Kodi add-ons launch cryptomining campaign

Kodi add-ons launch cryptomining campaign

Kodi add-ons launch cryptomining campaign

ESET researchers have discovered several third-party add-ons for the popular open-source media player Kodi being used to distribute Linux and Windows cryptocurrency-mining malware

Kaspars Osis13 Sep 2018


PowerPool malware exploits ALPC LPE zero-day vulnerability

PowerPool malware exploits ALPC LPE zero-day vulnerability

PowerPool malware exploits ALPC LPE zero-day vulnerability

Malware from newly uncovered group PowerPool exploits zero-day vulnerability in the wild, only two days after its disclosure

Matthieu Faou05 Sep 2018


Of ML and malware: What’s in store?

Of ML and malware: What’s in store?

Of ML and malware: What’s in store?

All things labeled Artificial Intelligence (AI) or Machine Learning (ML) are making waves, but talk of them in cybersecurity contexts often muddies the waters. A new ESET white paper sets out to bring some clarity to a subject where confusion often reigns supreme

Tomáš Foltýn04 Sep 2018


Turla: In and out of its unique Outlook backdoor

Turla: In and out of its unique Outlook backdoor

Turla: In and out of its unique Outlook backdoor

ESET research offers a rare glimpse into the mechanics of a particularly stealthy and resilient backdoor that the Turla cyberespionage group can fully control via PDF files attached to emails

Tomáš Foltýn22 Aug 2018


Fake banking apps on Google Play leak stolen credit card data

Fake banking apps on Google Play leak stolen credit card data

Fake banking apps on Google Play leak stolen credit card data

Fraudsters are using bogus apps to convince users of three Indian banks to divulge their personal data

Lukas Stefanko26 Jul 2018


A deep dive down the Vermin RAThole

A deep dive down the Vermin RAThole

A deep dive down the Vermin RAThole

ESET researchers have analyzed remote access tools cybercriminals have been using in an ongoing espionage campaign to systematically spy on Ukrainian government institutions and exfiltrate data from their systems

Kaspars Osis17 Jul 2018


Ammyy Admin compromised with malware again; World Cup used as cover

Ammyy Admin compromised with malware again; World Cup used as cover

Ammyy Admin compromised with malware again; World Cup used as cover

Website altered to serve a malware-tainted version of otherwise legitimate software with the global event in Russia acting as a smokescreen

Ondrej Kubovič11 Jul 2018


Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

D-Link and Changing Information Technologies code-signing certificates stolen and abused by highly skilled cyberespionage group focused on East Asia, particularly Taiwan

Anton Cherepanov09 Jul 2018


New Telegram-abusing Android RAT discovered in the wild

New Telegram-abusing Android RAT discovered in the wild

New Telegram-abusing Android RAT discovered in the wild

Entirely new malware family discovered by ESET researchers

Lukas Stefanko18 Jun 2018