ESET Research


2300 articles

OSX/Proton spreading again through supply-chain attack

OSX/Proton spreading again through supply-chain attack

OSX/Proton spreading again through supply-chain attack

Our researchers noticed that the makers of the Elmedia Player software have been distributing a version of their app trojanized with the OSX/Proton malware.

ESET Research20 Oct 2017


DoubleLocker: Innovative Android Ransomware

DoubleLocker: Innovative Android Ransomware

DoubleLocker: Innovative Android Ransomware

DoubleLocker can change the device’s PIN, preventing victims from accessing their devices, and also encrypts the data it finds in them - a combination that has not been seen previously in the Android ecosystem.

ESET Research13 Oct 2017


Money-making machine: Monero-mining malware

Money-making machine: Monero-mining malware

Money-making machine: Monero-mining malware

While far behind Bitcoin in market capitalization, Monero has several features that make it a very attractive cryptocurrency to be mined by malware.

Peter Kálnai and Michal Poslušný28 Sep 2017


BankBot trojan returns to Google Play with new tricks

BankBot trojan returns to Google Play with new tricks

BankBot trojan returns to Google Play with new tricks

The Android banking trojan that we first informed about in the beginning of this year has found its way to Google Play again and contains new tricks designed to get access to the private banking information of the user.

Lukas Stefanko25 Sep 2017


New FinFisher surveillance campaigns: Internet providers involved?

New FinFisher surveillance campaigns: Internet providers involved?

New FinFisher surveillance campaigns: Internet providers involved?

FinFisher has extensive spying capabilities, such as live surveillance through webcams and microphones, keylogging, and exfiltration of files. What sets FinFisher apart from other surveillance tools, however, are the controversies around its deployments.

Filip Kafka21 Sep 2017


Cryptocurrency web mining: In union there is profit

Cryptocurrency web mining: In union there is profit

Cryptocurrency web mining: In union there is profit

Cryptocurrency mining has been used by cybercriminals to make a quick and easy profit while corrupting the victim’s machine in the process.

Matthieu Faou14 Sep 2017


DownAndExec: Banking malware utilizes CDNs in Brazil

DownAndExec: Banking malware utilizes CDNs in Brazil

DownAndExec: Banking malware utilizes CDNs in Brazil

Services like Netflix use content delivery networks (CDNs) to maximize bandwidth usage. However, the CDNs might be becoming a new way of spreading malware.

Cassius Puodzius13 Sep 2017


New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies

New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies

New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies

Security researchers at ESET have released new research today into the activities of the notorious Turla cyberespionage group.

Graham Cluley30 Aug 2017


Gamescom 2017: It’s all fun and games until black hats step in

Gamescom 2017: It’s all fun and games until black hats step in

Gamescom 2017: It’s all fun and games until black hats step in

ESET researchers have discovered a new sneaky malware threat named Joao, targeting gamers worldwide.

Tomáš Gardoň22 Aug 2017