Click here to download all references as Bib-File.•
| 2025-05-22
⋅
ESET Research
⋅
Danabot: Analyzing a fallen empire DanaBot |
| 2025-05-15
⋅
ESET Research
⋅
Operation RoundPress SpyPress |
| 2025-05-12
⋅
ESET Research
⋅
ESET APT Activity Report Q4 2024–Q1 2025 BeaverTail InvisibleFerret GolangGhost |
| 2025-03-20
⋅
ESET Research
⋅
Operation FishMedley ShadowPad SodaMaster Spyder Earth Lusca FishMedley |
| 2025-03-11
⋅
Twitter (@ESETresearch)
⋅
Twitter Thread about PipeMagic PipeMagic |
| 2025-02-20
⋅
ESET Research
⋅
DeceptiveDevelopment targets freelance developers BeaverTail InvisibleFerret |
| 2025-01-22
⋅
ESET Research
⋅
PlushDaemon compromises supply chain of Korean VPN service SlowStepper PlushDaemon |
| 2024-11-27
⋅
ESET Research
⋅
Bootkitty: Analyzing the first UEFI bootkit for Linux Bootkitty |
| 2024-11-21
⋅
ESET Research
⋅
Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine FireWood WolfsBane Icesword |
| 2024-11-07
⋅
ESET Research
⋅
APT Activity Report: Abusing Cloud Services and VPN Platforms in the Pursuit of New Prey FrostyNeighbor |
| 2024-10-28
⋅
ESET Research
⋅
CloudScout: Evasive Panda scouting cloud services CloudScout MgBot Nightdoor |
| 2024-10-02
⋅
ESET Research
⋅
Separating the bee from the panda: CeranaKeeper making a beeline for Thailand PUBLOAD TONESHELL WavyExfiller CeranaKeeper |
| 2024-09-26
⋅
ESET Research
⋅
Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023 |
| 2024-09-10
⋅
ESET Research
⋅
CosmicBeetle steps up: Probation period at RansomHub Scarab Ransomware SpaceColon CosmicBeetle |
| 2024-08-28
⋅
ESET Research
⋅
Analysis of two arbitrary code execution vulnerabilities affecting WPS Office SpyGrace |
| 2024-08-28
⋅
ESET Research
⋅
ESET Research: Spy group exploits WPS Office zero day; analysis uncovers a second vulnerability SpyGrace |
| 2024-05-15
⋅
ESET Research
⋅
To the Moon and back(doors): Lunar landing in diplomatic missions LunarMail |
| 2024-05-14
⋅
ESET Research
⋅
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain Ebury |
| 2024-05-13
⋅
ESET Research
⋅
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain Ebury |
| 2024-04-10
⋅
ESET Research
⋅
eXotic Visit campaign: Tracing the footprints of Virtual Invaders XploitSPY |