ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

ESET researchers discovered a zero-day exploit, which targets the Telegram app for Android, that appeared for sale for an unspecified price in an underground forum post from June 2024. ESET Research found an advertisement for a zero-day exploit that targets the Telegram for Android app, posted in an underground forum. ESET named the vulnerability targeted … More ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

ESET Research: Hamster Kombat game misused by cybercriminals as spyware and infostealer

ESET researchers have discovered threats abusing the success of the Hamster Kombat clicker game. The Hamster Kombat game’s success has attracted malicious actors trying to abuse public interest in the game for monetary gain. ESET researchers discovered Android spyware named Ratel pretending to be Hamster Kombat, distributed via an unofficial Telegram channel. Android users are … More ESET Research: Hamster Kombat game misused by cybercriminals as spyware and infostealer

ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

ESET researchers have identified five campaigns that employ trojanised apps to target Android users. ESET Research discovered multistage Android malware, which ESET named AridSpy, being distributed via five dedicated websites. ESET detected occurrences of AridSpy in both Palestine and Egypt and attribute it, with medium confidence, to the Arid Viper APT group. AridSpy’s code is, … More ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

ESET discovers targeted attack via fake messaging apps, available on web and Google Play

ESET researchers have discovered an active espionage campaign named eXotic Visit, targeting Android users with apps primarily posing as messaging services. An active and targeted Android espionage campaign, eXotic Visit, started in late 2021 and mainly impersonates messaging apps that are distributed through dedicated websites and Google Play. The region of interest seems to be … More ESET discovers targeted attack via fake messaging apps, available on web and Google Play