White Papers

94 reports

En Route with Sednit: Full Whitepaper

En Route with Sednit: Full Whitepaper

The full whitepaper “En Route with Sednit,” compiling parts 1-3.


En Route with Sednit – Part 2: Observing the Comings and Goings

En Route with Sednit – Part 2: Observing the Comings and Goings

In the second part of our whitepaper “En Route with Sednit”, we focus on Sednit’s espionage toolkit, which is deployed on targets deemed interesting after a reconnaissance phase (described in the first part of the whitepaper).


En Route with Sednit – Part 1: Approaching the target

En Route with Sednit – Part 1: Approaching the target

In the first part of our whitepaper “En Route with Sednit”, we focus on the methods used by the group to attack its targets, and on who these targets are.


Visiting the bear Den Presentation for REcon 2016

Visiting the bear Den Presentation for REcon 2016

A journey in the land of (Cyber-) espionage - stunning presentation by ESET researchers JoanCalvet, Jessy Campos and Thomas Dupuy.


Windows 10 security and privacy: An in-depth review and analysis

Windows 10 security and privacy: An in-depth review and analysis

As Windows 10 nears its one year anniversary, WeLiveSecurity gives an in-depth review of the operating system from a security and privacy perspective.


Operation Groundbait: Analysis of a surveillance toolkit

Operation Groundbait: Analysis of a surveillance toolkit

Operation Groundbait (Russian: Прикормка, Prikormka) is an ongoing cyber-surveillance operation targeting individuals in Ukraine. The group behind this operation has been launching targeted and possibly politically-motivated attacks to spy on individuals.
This paper presents ESET’s findings about Operation Groundbait based on our re- search into the Prikormka malware family.


Operation Buhtrap Presentation for AVAR2015

Operation Buhtrap Presentation for AVAR2015

A presentation by Jean-Ian Boutin, Anton Cherepanov and Jan Matušík, detailing Operation Buhtrap.


The Rise of Android Ransomware

The Rise of Android Ransomware

Ransomware is a growing problem for users of mobile devices. Lock-screen types and fine-encrypting “crypto-ransomware”, both of which have been causing major financial and data losses for many years, have made their way to the Android platform. This report discusses further.


Windows 10: Should you go there?

Windows 10: Should you go there?

Windows 10: Should you go there?