Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-08-26 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet about PromptLock discovery
PromptLock
2025-08-11 ⋅ ESET Research ⋅ Anton Cherepanov, Damien Schaeffer, Peter Strýček
Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
dynamichttp
2025-07-01 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits
UnsolicitedBooker
2025-06-05 ⋅ ESET Research ⋅ ESET Research
BladedFeline: Whispering in the dark
Hawking RDAT Spereal Veaty BladedFeline
2025-05-22 ⋅ ESET Research ⋅ Tomáš Procházka
Danabot: Analyzing a fallen empire
DanaBot
2025-05-15 ⋅ ESET Research ⋅ Matthieu Faou
Operation RoundPress
SpyPress
2025-05-12 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report Q4 2024–Q1 2025
BeaverTail InvisibleFerret GolangGhost
2025-04-30 ⋅ ESET Research ⋅ Facundo Muñoz
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
TheWizards
2025-03-20 ⋅ ESET Research ⋅ Matthieu Faou
Operation FishMedley
ShadowPad SodaMaster Spyder Earth Lusca FishMedley
2025-03-11 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Twitter Thread about PipeMagic
PipeMagic
2025-02-20 ⋅ ESET Research ⋅ ESET Research
DeceptiveDevelopment targets freelance developers
BeaverTail InvisibleFerret
2025-01-22 ⋅ ESET Research ⋅ Facundo Muñoz
PlushDaemon compromises supply chain of Korean VPN service
SlowStepper PlushDaemon
2024-11-27 ⋅ ESET Research ⋅ Martin Smolár, Peter Strýček
Bootkitty: Analyzing the first UEFI bootkit for Linux
Bootkitty
2024-11-21 ⋅ ESET Research ⋅ Viktor Sperka
Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
FireWood WolfsBane Icesword
2024-11-07 ⋅ ESET Research ⋅ ESET Research
APT Activity Report: Abusing Cloud Services and VPN Platforms in the Pursuit of New Prey
FrostyNeighbor
2024-10-28 ⋅ ESET Research ⋅ Anh ho
CloudScout: Evasive Panda scouting cloud services
CloudScout MgBot Nightdoor
2024-10-02 ⋅ ESET Research ⋅ Romain Dumont
Separating the bee from the panda: CeranaKeeper making a beeline for Thailand
PUBLOAD TONESHELL WavyExfiller CeranaKeeper
2024-09-26 ⋅ ESET Research ⋅ Zoltán Rusnák
Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023
2024-09-10 ⋅ ESET Research ⋅ Jakub Souček
CosmicBeetle steps up: Probation period at RansomHub
Scarab Ransomware SpaceColon CosmicBeetle
2024-08-28 ⋅ ESET Research ⋅ Romain Dumont
Analysis of two arbitrary code execution vulnerabilities affecting WPS Office
SpyGrace