HybridPetya encrypts the Master File Table and can compromise modern UEFI-based systems by installing a malicious EFI application. A variant exploits the CVE-2024-7344 vulnerability to bypass Secure Boot with a cloak.dat file. There is no evidence of active use in the real world. Researchers from ESET, a global European leader in the cybersecurity market,

For the first time, the interaction between two Russian cyber espionage groups has been documented: one provides initial access to numerous systems, the other selects the most strategic targets, exploiting shared tools to hit sensitive targets in Ukraine Milan, 22 September 2025 – Researchers from ESET, the global European leader in the cybersecurity market, have discovered

ESET, a global European cybersecurity market leader, has been recognized as a Strong Performer in The Forrester Wave™: Managed Detection And Response Services In Europe, Q3 2025. According to ESET, this recognition highlights the strength of the ESET PROTECT platform, which powers Managed Detection and Response (MDR) services by combining local threat intelligence with

Over 65 compromised Windows servers identified as of June 2025, with victims in multiple countries. The attacks affected companies in the insurance, healthcare, retail, transportation, technology and education sectors. The group used customized tools, including the Rungan backdoor and the Gamshen IIS module for SEO fraud. Researchers from ESET, a global European leader in

A zero-day vulnerability discovered in WinRAR, exploited by the pro-Russian group RomCom. The flaw, already fixed, allowed paths in archives to be manipulated to execute malicious code. The attacks aimed to install backdoors such as variants of SnipBot, RustyClaw, and the Mythic agent. It is recommended to update your software Researchers at ESET, the global European leader in the

ESET has been monitoring Danabot since 2018. The malware, offered as a service, is known for stealing data and spreading ransomware. ESET analysis reveals the latest features and developers' business model. Among the most affected countries are Poland, Italy, Spain and Türkiye. ESET, the global European leader in the

The report highlights the intensification of espionage and sabotage activities by groups linked to Russia, China and North Korea, with attacks targeting critical infrastructure and institutions in Ukraine, the EU and Asia. Among the techniques: zero-day exploits, spearphishing and social engineering ESET, the global European leader in the cybersecurity market, has published the latest

The email espionage campaign exploits XSS vulnerabilities in webmails such as Roundcube, Horde, MDaemon and Zimbra. Government targets and defense companies targeted, with theft of credentials, contacts and messages, and the possibility of bypassing two-factor authentication Researchers from ESET, the global European leader in the cybersecurity market, have discovered an operation

The group, engaged in cyberspionaggio operations, led an attack on the supply chain of a South Korean VPN developer, replacing the legitimate installer with one containing the Backdoor Slowstepper, used exclusively by Plushdaemon, the researchers of ESET, a global European leader in the cybersecurity market, discovered an attack on the Supply Chain of a VPN provider

The exploit of this vulnerability allows the execution of unreliable code during the system boot, allowing the installation of harmful UEFI Bootkit. Thanks to ESET's intervention, the problem was solved with the Microsoft update on January 14, the researchers of ESET, a global European leader in the cybersecurity market, discovered a vulnerability that affects the most