Latest Articles

BladedFeline: Whispering in the dark

BladedFeline: Whispering in the dark

BladedFeline: Whispering in the dark

ESET researchers analyzed a cyberespionage campaign conducted by BladedFeline, an Iran-aligned APT group with likely ties to OilRig

ESET Research05 Jun 2025


Don’t let dormant accounts become a doorway for cybercriminals

Don’t let dormant accounts become a doorway for cybercriminals

Don’t let dormant accounts become a doorway for cybercriminals

Do you have online accounts you haven't used in years? If so, a bit of digital spring cleaning might be in order.

Phil Muncaster02 Jun 2025


This month in security with Tony Anscombe – May 2025 edition

This month in security with Tony Anscombe – May 2025 edition

This month in security with Tony Anscombe – May 2025 edition

From a flurry of attacks targeting UK retailers to campaigns corralling end-of-life routers into botnets, it's a wrap on another month filled with impactful cybersecurity news

Editor30 May 2025


Word to the wise: Beware of fake Docusign emails

Word to the wise: Beware of fake Docusign emails

Word to the wise: Beware of fake Docusign emails

Cybercriminals impersonate the trusted e-signature brand and send fake Docusign notifications to trick people into giving away their personal or corporate data

Phil Muncaster27 May 2025


Danabot under the microscope

Danabot under the microscope

Danabot under the microscope

ESET Research has been tracking Danabot’s activity since 2018 as part of a global effort that resulted in a major disruption of the malware’s infrastructure

Editor23 May 2025


Danabot: Analyzing a fallen empire

Danabot: Analyzing a fallen empire

Danabot: Analyzing a fallen empire

ESET Research shares its findings on the workings of Danabot, an infostealer recently disrupted in a multinational law enforcement operation

Tomáš Procházka22 May 2025


Lumma Stealer: Down for the count

Lumma Stealer: Down for the count

Lumma Stealer: Down for the count

The bustling cybercrime enterprise has been dealt a significant blow in a global operation that relied on the expertise of ESET and other technology companies

Editor22 May 2025


ESET takes part in global operation to disrupt Lumma Stealer

ESET takes part in global operation to disrupt Lumma Stealer

ESET takes part in global operation to disrupt Lumma Stealer

Our intense monitoring of tens of thousands of malicious samples helped this global disruption operation

Jakub Tomanek21 May 2025


The who, where, and how of APT attacks in Q4 2024–Q1 2025

The who, where, and how of APT attacks in Q4 2024–Q1 2025

The who, where, and how of APT attacks in Q4 2024–Q1 2025

ESET Chief Security Evangelist Tony Anscombe highlights key findings from the latest issue of the ESET APT Activity Report

Editor19 May 2025


ESET APT Activity Report Q4 2024–Q1 2025

ESET APT Activity Report Q4 2024–Q1 2025

ESET APT Activity Report Q4 2024–Q1 2025

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2024 and Q1 2025

Jean-Ian Boutin19 May 2025


Sednit abuses XSS flaws to hit gov't entities, defense companies

Sednit abuses XSS flaws to hit gov't entities, defense companies

Sednit abuses XSS flaws to hit gov't entities, defense companies

Operation RoundPress targets webmail software to steal secrets from email accounts belonging mainly to governmental organizations in Ukraine and defense contractors in the EU

Editor15 May 2025


Operation RoundPress

Operation RoundPress

Operation RoundPress

ESET researchers uncover a Russia-aligned espionage operation targeting webmail servers via XSS vulnerabilities

Matthieu Faou15 May 2025


Apt Activity Report
MDR Protection