ESET Research discovers HybridPetya, a ransomware capable of bypassing UEFI Secure Boot

HybridPetya encrypts the Master File Table and can compromise modern UEFI-based systems by installing a malicious EFI application. A variant exploits the CVE-2024-7344 vulnerability to bypass Secure Boot with a cloak.dat file. There is no evidence of active use in the real world. Researchers from ESET, a global European leader in the cybersecurity market,
Tagged under:

ESET: Gamaredon and Turla, groups linked to the Russian Federal Security Service, collaborate to target high-profile entities in Ukraine

For the first time, the interaction between two Russian cyber espionage groups has been documented: one provides initial access to numerous systems, the other selects the most strategic targets, exploiting shared tools to hit sensitive targets in Ukraine Milan, 22 September 2025 – Researchers from ESET, the global European leader in the cybersecurity market, have discovered
Tagged under:

ESET recognized as a Strong Performer in Forrester's independent assessment of MDR services in Europe

ESET, a global European cybersecurity market leader, has been recognized as a Strong Performer in The Forrester Wave™: Managed Detection And Response Services In Europe, Q3 2025. According to ESET, this recognition highlights the strength of the ESET PROTECT platform, which powers Managed Detection and Response (MDR) services by combining local threat intelligence with
Tagged under:

ESET discovers new Chinese threat group: GhostRedirector manipulates Google and infects Windows servers with backdoor

Over 65 compromised Windows servers identified as of June 2025, with victims in multiple countries. The attacks affected companies in the insurance, healthcare, retail, transportation, technology and education sectors. The group used customized tools, including the Rungan backdoor and the Gamshen IIS module for SEO fraud. Researchers from ESET, a global European leader in
Tagged under:

ESET Research: Russian group RomCom exploits new vulnerability and targets companies in Europe and Canada

A zero-day vulnerability discovered in WinRAR, exploited by the pro-Russian group RomCom. The flaw, already fixed, allowed paths in archives to be manipulated to execute malicious code. The attacks aimed to install backdoors such as variants of SnipBot, RustyClaw, and the Mythic agent. It is recommended to update your software Researchers at ESET, the global European leader in the
Tagged under:

ESET Discover Promptlock, the first Ai-Powered ransomware

Promptlock uses a model to the room to generate in real time script LUA compatible with Windows, Linux and MacOS. Based on predefined prompts, it decides independently whether to exfiltrate or encrypt the data. Take advantage of a model accessible via API and, despite being a proof of concept, represents a concrete threat, the researchers of ESET, a global European leader

ESET riconosciuta Customers’ Choice nel Gartner® Peer Insights™ Voice of the Customer for Endpoint Protection Platforms Report 2025

ESET recognized as Customers' Choice in the Gartner® Peer Insights™ Voice of the Customer for Endpoint Protection Platforms Report 2025 ESET, a global European leader in the cybersecurity market, has been recognized as a Customers' Choice in the Gartner® Peer Insights™ “Voice of the Customer” for Endpoint report Protection Platforms 2025, in the category of organizations with an annual turnover included

ESET Research discovers new variants of AsyncRAT, a favorite tool of cybercriminals

The study reconstructs the evolution of AsyncRAT and its derivatives, highlighting differences and uses. Some variants are enhanced, others created for fun but still dangerous. The open source code facilitates its diffusion even among inexperienced actors ESET, a global European leader in the cybersecurity market, has published a detailed analysis on AsyncRAT, a remote access tool

ESET Research: Gamaredon intensifies campaigns against Ukraine with updated tools

In 2024, the pro-Russian APT group targeted exclusively Ukrainian institutions with intensified spearphishing campaigns, introducing new tools for evasion and persistence and hiding the C&C infrastructure behind tunnels Cloudflare and third-party services ESET, the global European leader in the cybersecurity market, has published a white paper analyzing the evolution of the APT Gamaredon group's instrumentation,

ESET Annual Report: growth and innovation guide the results of 2024

Global turnover growing by 9% year-on-year, to 691 million euros, driven by the EMEA region (+15%). Adjusted EBITDA at 100 million euros (+7%). B2B revenues up 13%, with Enterprise at +21% and Services at +56% ESET, the global European leader in the cybersecurity market, presented its financial results