ESET Research


2300 articles

KillDisk now targeting Linux: Demands $250K ransom, but can’t decrypt

KillDisk now targeting Linux: Demands $250K ransom, but can’t decrypt

KillDisk now targeting Linux: Demands $250K ransom, but can’t decrypt

ESET has discovered a Linux variant of the KillDisk component that renders Linux machines unbootable, while encrypting files and requesting a large ransom at the same time.

Robert Lipovsky and Peter Kálnai05 Jan 2017


New Linux/Rakos threat: devices and servers under SSH scan (again)

New Linux/Rakos threat: devices and servers under SSH scan (again)

New Linux/Rakos threat: devices and servers under SSH scan (again)

ESET's Peter Kálnai and Michal Malik report on a new Linux/Rakos threat - devices and servers are under SSH scan again.

Peter Kálnai and Michal Malik20 Dec 2016


The rise of TeleBots: Analyzing disruptive KillDisk attacks

The rise of TeleBots: Analyzing disruptive KillDisk attacks

The rise of TeleBots: Analyzing disruptive KillDisk attacks

ESET's Anton Cherepanov analyzes the work of TeleBots, a malicious toolset that was used in focused cyberattacks against targets in Ukraine's financial sector.

Anton Cherepanov13 Dec 2016


Modern attacks on Russian financial institutions

Modern attacks on Russian financial institutions

Modern attacks on Russian financial institutions

ESET's Anton Cherepanov Jean-Ian Boutin discuss their paper, titled Modern Attacks on Russian Financial Institutions, which was published earlier this year.

Anton Cherepanov and Jean-Ian Boutin12 Dec 2016


Stegano exploit kit poisoning pixels

Stegano exploit kit poisoning pixels

Stegano exploit kit poisoning pixels

Visiting popular websites and getting infected without any interaction? ESET explains how the stealthy Stegano exploit kit, hiding in the pixels of malicious ads, is capable of performing this dirty job.

Peter Stancik06 Dec 2016


Readers of popular websites targeted by stealthy Stegano exploit kit hiding in pixels of malicious ads

Readers of popular websites targeted by stealthy Stegano exploit kit hiding in pixels of malicious ads

Readers of popular websites targeted by stealthy Stegano exploit kit hiding in pixels of malicious ads

Millions of readers who visit popular news websites have been targeted by a series of malicious ads redirecting them to the Stegano exploit kit.

ESET Research06 Dec 2016


Avalanche takedown: Check if you are safe

Avalanche takedown: Check if you are safe

Avalanche takedown: Check if you are safe

Earlier this week coordinated law enforcement action took down the Avalanche fast-flux network. ESET has been assisting in the cleanup.

Jean-Ian Boutin01 Dec 2016


Tesco Bank not alone in being targeted by Retefe malware

Tesco Bank not alone in being targeted by Retefe malware

Tesco Bank not alone in being targeted by Retefe malware

Tesco Bank, which recently saw thousands of its customers lose funds to cybercriminals, has been found on the target list of the so-called Retefe malware.

Peter Stancik10 Nov 2016


I can see your texts: A deep dive into SMS/messaging clients, security, and privacy

I can see your texts: A deep dive into SMS/messaging clients, security, and privacy

I can see your texts: A deep dive into SMS/messaging clients, security, and privacy

ESET's Michael Aguilar takes a deep dive into SMS/messaging clients, security, and privacy.

Michael Aguilar04 Nov 2016