The Gentlemen Group develops, maintains and provides to affiliates a proprietary EDR-killers suite called 'GentleKiller', with at least eight variants based on vulnerable or malicious drivers and integrated with third-party tools (HexKiller, ThrottleBlood and HavocKiller). The unified avoidance strategy reinforces impersonation and protection, while victimology shows a non-centered global distribution

ESET has discovered two new Windows variants of the SprySOCKS backdoor attributed to the FishMonger group. Active between 2023 and 2024 against government entities in Honduras, Taiwan, Thailand and Pakistan, they support communications via TCP, UDP and WebSocket and implement over 30 commands. The WIN_DRV variant employs a kernel driver to hide a TCP backdoor e

ESET, the global European cybersecurity market leader, has been recognized as a “Challenger” in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection¹ for the third consecutive year, thanks to its ESET PROTECT product range. The company has achieved this recognition for 16 consecutive years and has been named “Challenger” 7 times in the last few

ESET's new eCrime Reports provide quality insights into incidents, providing indicators of compromise, threat hunting rules and guidance to enhance resilience. Reports offer clear insight into intrusions and reveal clusters of hidden actions, while ESET AI Advisor allows security teams to analyze threats and

ESET protects Virtual Machines (VMs) in the cloud from advanced threats with the new ESET Cloud Workload Protection module. While competitors often offer cloud workload protection as a stand-alone solution, ESET offers it at no cost to ESET PROTECT customers. Additional updates include advanced AI-powered reporting capabilities for sandboxing technology

EDR killers are central to current ransomware intrusions: perpetrators prefer short, secure windows to encrypt data. They are chosen by members, not by operators, and increase the diversity of tools. They use evasion techniques, sometimes supported by AI, as in the case of the Warlock group; mainly BYOVD tools are used, but also custom scripts,

ESET researchers traced the reactivation of the Sednit group back to a 2024 case in Ukraine, where they used a keylogger called SlimAgent that involved the use of two other malware called BeardShell and Covenant. In 2025 and 2026, Sednit repeatedly employed these tools and modified open source malware

On March 10, in Milan, ESET and Cyberating will explore the role of Digital Repatriation in the new European regulatory scenario, between digital sovereignty, risk management and cyber strategies Milan, March 6, 2026 – Next March 10, Milan will host a high-level discussion on one of the topics that is marking the cyber agenda in

Researchers at ESET, a global leader in the cybersecurity market, have discovered PromptSpy, the first known Android threat to use generative AI in its execution flow to achieve persistence. It is the first time that generative AI has been used in this way. Since attackers rely on prompting an AI model

ESET, a global leader in the cybersecurity market, was recognized as Customers' Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for Endpoint Protection Platforms¹ report. Out of 18 vendors evaluated, ESET is among only five to have obtained this recognition, based on performance in terms of User Interest and Adoption (axis