Tag: APT

ESET discovers new APT group and its supply chain attack on South Korean VPN service

January 22, 2025

ESET researchers have discovered a supply-chain attack against a VPN provider in South Korea by a newly discovered and previously undetected China-aligned APT group that ESET has named PlushDaemon. ESET Research has discovered a previously undetected China-aligned Advanced Persistent Threat (APT) group, PlushDaemon, engaged in cyberespionage operations. PlushDaemon’s main initial access vector is hijacking legitimate … More ESET discovers new APT group and its supply chain attack on South Korean VPN service

APT groups are increasingly deploying ransomware – and that’s bad news for everyone

January 8, 2025

The blurring of lines between cybercrime and APT attacks underscores the increasingly fluid and multifaceted nature of today’s cyberthreats. There was a time when the boundary between cybercrime and advanced persistent threat activity was rather easy to discern. Cybercriminals were fuelled solely by the profit motive. And their counterparts in the government carried out mainly … More APT groups are increasingly deploying ransomware – and that’s bad news for everyone

ESET Research discovers Mozilla and Windows zero day & zero click vulnerabilities exploited by RomCom APT group

November 26, 2024

ESET Research details the analysis of a previously unknown vulnerability in Mozilla products exploited in the wild and another previously unknown Microsoft Windows vulnerability, combined in a zero-click exploit. ESET researchers discovered two previously unknown vulnerabilities, one in Mozilla and the other in Windows, being exploited by the RomCom Advanced persistent threat (APT) group. Analysis … More ESET Research discovers Mozilla and Windows zero day & zero click vulnerabilities exploited by RomCom APT group

ESET Research discovers WolfsBane, new Linux cyberespionage backdoor by Gelsemium APT

November 21, 2024

ESET researchers have identified multiple samples of a Linux backdoor, which they named WolfsBane and attribute with high confidence to Gelsemium advanced persistent threat (APT) group. ESET researchers have identified multiple samples of the Linux backdoor WolfsBane and attribute it with high confidence to Gelsemium APT group The goal of the discovered backdoors and tools … More ESET Research discovers WolfsBane, new Linux cyberespionage backdoor by Gelsemium APT

Cyberespionage the Gamaredon way

November 14, 2024

ESET researchers introduce the Gamaredon APT group, detailing its typical modus operandi, unique victim profile, vast collection of tools and social engineering tactics. When describing state-backed threat actors, one would probably expect a super sophisticated, stealthy group capable of avoiding all alarms and defenses with surgical precision. With Gamaredon, most of that goes out the … More Cyberespionage the Gamaredon way