ESET Research

ESET Research



627 articles by ESET Research

FishMonger’s arsenal upgraded: SprySOCKS for Windows

FishMonger’s arsenal upgraded: SprySOCKS for Windows

FishMonger’s arsenal upgraded: SprySOCKS for Windows

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness

ESET Research • 16 Jun 2026 • 22 min. read


OceanLotus: From external espionage to domestic targeting

OceanLotus: From external espionage to domestic targeting

OceanLotus: From external espionage to domestic targeting

A shift in operational pattern of the infamous Vietnam-aligned APT group

ESET Research • 11 Jun 2026 • 11 min. read


Sednit reloaded: Back in the trenches

Sednit reloaded: Back in the trenches

Sednit reloaded: Back in the trenches

The resurgence of one of Russia’s most notorious APT groups

ESET Research • 10 Mar 2026 • 12 min. read


DynoWiper update: Technical analysis and attribution

DynoWiper update: Technical analysis and attribution

DynoWiper update: Technical analysis and attribution

ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector

ESET Research • 30 Jan 2026 • 11 min. read


ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper

ESET Research • 23 Jan 2026 • 2 min. read


MuddyWater: Snakes by the riverbank

MuddyWater: Snakes by the riverbank

MuddyWater: Snakes by the riverbank

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook

ESET Research • 02 Dec 2025 • 20 min. read


ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

Threat actors are embracing ClickFix, ransomware gangs are turning on each other – toppling even the leaders – and law enforcement is disrupting one infostealer after another

ESET Research • 05 Aug 2025 • 1 min. read


ToolShell: An all-you-can-eat buffet for threat actors

ToolShell: An all-you-can-eat buffet for threat actors

ToolShell: An all-you-can-eat buffet for threat actors

ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities

ESET Research • 24 Jul 2025 • 3 min. read


ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET experts discuss Sandworm’s new data wiper, relentless campaigns by UnsolicitedBooker, attribution challenges amid tool-sharing, and other key findings from the latest APT Activity Report

ESET Research • 01 Jul 2025 • 2 min. read