ESET Research


2300 articles

CVE-2014-4114: Details on August BlackEnergy PowerPoint Campaigns

CVE-2014-4114: Details on August BlackEnergy PowerPoint Campaigns

CVE-2014-4114: Details on August BlackEnergy PowerPoint Campaigns

In this post we provide additional information on how a specially crafted PowerPoint slideshow file (.PPSX) led to the execution of a BlackEnergy dropper.

Robert Lipovsky14 Oct 2014


Sednit espionage group now using custom exploit kit

Sednit espionage group now using custom exploit kit

Sednit espionage group now using custom exploit kit

For at least five years the Sednit group has been relentlessly attacking various institutions, most notably in Eastern Europe. The group used several advanced pieces of malware for these targeted attacks, in particular the one we named Win32/Sednit, also known as Sofacy.

ESET Research08 Oct 2014


How to keep your child safe on YouTube

How to keep your child safe on YouTube

How to keep your child safe on YouTube

YouTube is one of the most popular websites in the world, but can expose younger viewers to inappropriate content. By following these 5 precautionary measures you can keep your child safe from any content that may be unsuitable.

Editor02 Oct 2014


Should I worry about my connected devices?

Should I worry about my connected devices?

Should I worry about my connected devices?

There could be many benefits of having a connected household, but connecting your appliances to the internet could also put them at risk of being hacked. We provide some useful tips to make sure all of your connected devices are protected.

Editor02 Oct 2014


Bootkits, Windigo, and Virus Bulletin

Bootkits, Windigo, and Virus Bulletin

Bootkits, Windigo, and Virus Bulletin

ESET research on Operation Windigo received an award at Virus Bulletin 2014. Our research on bootkits was also well received, and is now available publicly.

David Harley30 Sep 2014


How to fix Shellshock Bash on Mac OS X: Mavericks edition

How to fix Shellshock Bash on Mac OS X: Mavericks edition

How to fix Shellshock Bash on Mac OS X: Mavericks edition

Apple Mac OS X users concerned about the Bash vulnerability dubbed Shellshock got some relief late yesterday as Apple published fixes for various versions of OS X. But if you use Mavericks you will need to install 10.9.5 before the Bash fix will work.

Stephen Cobb30 Sep 2014


How to resolve Shellshock on Mac OS X, web servers and more

How to resolve Shellshock on Mac OS X, web servers and more

How to resolve Shellshock on Mac OS X, web servers and more

The "Bash Bug" or "Shellshock" vulnerability means a wide range of devices, servers and computers, including Mac OS X, will need to be patched to prevent abuse by malicious persons. Here's advice about what to do and links to more in-depth resources.

Stephen Cobb25 Sep 2014


Back in BlackEnergy *: 2014 Targeted Attacks in Ukraine and Poland

Back in BlackEnergy *: 2014 Targeted Attacks in Ukraine and Poland

Back in BlackEnergy *: 2014 Targeted Attacks in Ukraine and Poland

State organizations and private businesses from various sectors in Ukraine and Poland have been targeted with new versions of BlackEnergy, a malware that's evolved into a sophisticated threat with a modular architecture.

Robert Lipovsky22 Sep 2014


Virus Bulletin presentations update

Virus Bulletin presentations update

Virus Bulletin presentations update

Updated information on ESET presentations at Virus Bulletin 2014.

David Harley22 Sep 2014