Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-01-11 ⋅ ESET Research ⋅ Michal Poslušný
Signed kernel drivers – Unguarded gateway to Windows’ core
InvisiMole LoJax RobinHood Slingshot
2021-12-15 ⋅ ESET Research ⋅ ESET Research
The dirty dozen of Latin America: From Amavaldo to Zumanek
Krachulka Lokorrito Zumanek
2021-12-01 ⋅ ESET Research ⋅ Alexis Dorais-Joncas, Facundo Muñoz
Jumping the air gap: 15 years of nation‑state effort
Agent.BTZ Fanny Flame Gauss PlugX Ramsay Retro Stuxnet USBCulprit USBferry
2021-11-16 ⋅ ESET Research ⋅ Matthieu Faou
Strategic web compromises in the Middle East with a pinch of Candiru
Caramel Tsunami Karkadann
2021-11-10 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on a discovery of a trojanized IDA Pro installer, distributed by the LABYRINTH CHOLLIMA group.
2021-10-29 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on FreeBSD and LInux version of Hive ransomware
Hive
2021-10-27 ⋅ ESET Research ⋅ Vladislav Hrčka
Wslink: Unique and undocumented malicious loader that runs as a server
Wslink
2021-10-15 ⋅ ESET Research ⋅ ESET Research
Tweet on a malicious campaign targeting governmental and education entities in Colombia using multiple stages to drop AsyncRAT or njRAT Keylogger on their victims
AsyncRAT NjRAT
2021-10-07 ⋅ ESET Research ⋅ Vladislav Hrčka
FontOnLake: Previously unknown malware family targeting Linux
FontOnLake
2021-10-06 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on ERMAC android malware
ERMAC
2021-10-06 ⋅ ESET Research ⋅ Martina López
To the moon and hack: Fake SafeMoon app drops malware to spy on you
Remcos
2021-10-05 ⋅ ESET Research ⋅ Anton Cherepanov, Martin Smolár
UEFI threats moving to the ESP: Introducing ESPecter bootkit
ESPecter
2021-09-24 ⋅ Proofpoint ⋅ Proofpoint
Daily Ruleset Update Summary 2021/09/24
MirrorBlast
2021-09-23 ⋅ ESET Research ⋅ ESET Research
Tweet on C# variant of the nccTrojan
nccTrojan
2021-09-23 ⋅ ESET Research ⋅ Matthieu Faou, Tahseen Bin Taj
FamousSparrow: A suspicious hotel guest
SparrowDoor GhostEmperor
2021-09-20 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on Dark.IoT Botnet exploiting critical Azure vulnerability CVE-2021-38647 #OMIGOD
Dark
2021-09-17 ⋅ ESET Research ⋅ ESET Research
Numando: Count once, code twice
Numando
2021-09-07 ⋅ ESET Research ⋅ Lukáš Štefanko
BladeHawk group: Android espionage against Kurdish ethnic group
888 RAT BladeHawk Kasablanka
2021-09-03 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Twitter thread on SPARKLOG, a launcher component for PRIVATELOG along with STASHLOG
PRIVATELOG STASHLOG
2021-08-24 ⋅ ESET Research ⋅ Mathieu Tartare, Thibaut Passilly
The SideWalk may be as dangerous as the CROSSWALK
Cobalt Strike CROSSWALK SideWalk SparklingGoblin