Cybersecurity research and insight for the AI era · Moving soon to the ESET Blog
Cybersecurity research and insight for the AI era · <a href='https://www.eset.com/blog/en/' target='_blank'>Moving soon to the ESET Blog</a>
Anton Cherepanov and Peter Strýček • 22 Oct 2026 • 16 min. read
ESET Research
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Fernando Tavella • 08 Oct 2026 • 15 min. read
MATCHBOIL: New tricks, same old evil intentions
Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. read
Beware the SparroWock: The backdoor that bites, the commands that catch
Business Security
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
Making it stick: How to get the most out of cybersecurity training
Security awareness training doesn’t have to be a snoozefest – games and stories can help instill ‘sticky’ habits that will kick in when a danger is near
Tomáš Foltýn • 28 Mar 2025
Video
RansomHub affiliates linked to rival RaaS gangs
ESET researchers also examine the growing threat posed by tools that ransomware affiliates deploy in an attempt to disrupt EDR security solutions
Editor • 27 Mar 2025
FamousSparrow resurfaces to spy on targets in the US, Latin America
Once thought to be dormant, the China-aligned group has also been observed using the privately-sold ShadowPad backdoor for the first time
Shifting the sands of RansomHub’s EDRKillShifter
ESET researchers discover new ties between affiliates of RansomHub and of rival gangs Medusa, BianLian, and Play
Jakub Souček and Jan Holman • 26 Mar 2025
You will always remember this as the day you finally caught FamousSparrow
ESET researchers uncover the toolset used by the FamousSparrow APT group, including two undocumented versions of the group’s signature backdoor, SparrowDoor
Alexandre Côté Cyr • 26 Mar 2025
Operation FishMedley
ESET researchers detail a global espionage operation by FishMonger, the APT group run by I‑SOON
Matthieu Faou • 20 Mar 2025
MirrorFace updates toolset, expands targeting to Europe
The group's Operation AkaiRyū begins with targeted spearphishing emails that use the upcoming World Expo 2025 in Osaka, Japan, as a lure
Editor • 18 Mar 2025
Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor
ESET researchers uncovered MirrorFace activity that expanded beyond its usual focus on Japan and targeted a Central European diplomatic institute with the ANEL backdoor
Dominik Breitenbacher • 18 Mar 2025
AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1)
Here's what's been hot on the AI scene over the past 12 months, how it's changing the face of warfare, and how you can fight AI-powered scams
Editor • 17 Mar 2025
Critical Infrastructure
When IT meets OT: Cybersecurity for the physical world
While relatively rare, real-world incidents impacting operational technology highlight that organizations in critical infrastructure can’t afford to dismiss the OT threat
Phil Muncaster • 14 Mar 2025
Cybercrime
Don’t let cybercriminals steal your Spotify account
Listen up, this is sure to be music to your ears – a few minutes spent securing your account today can save you a ton of trouble tomorrow
Christian Ali Bravo • 11 Mar 2025
AI-driven deception: A new face of corporate fraud
Malicious use of AI is reshaping the fraud landscape, creating major new risks for businesses
Phil Muncaster • 10 Mar 2025
Sign up for our newsletters