Tag: exploit

ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

July 25, 2024

ESET researchers discovered a zero-day exploit, which targets the Telegram app for Android, that appeared for sale for an unspecified price in an underground forum post from June 2024. Using the exploit to abuse a vulnerability that ESET named “EvilVideo,” attackers could share malicious Android payloads via Telegram channels, groups, and chats, and make them … More ESET Research discovers EvilVideo: Telegram app for Android targeted by zero-day exploit sending malicious videos

ESET discovers targeted attack via fake messaging apps, available on web and Google Play

April 10, 2024

ESET researchers have discovered an active espionage campaign named eXotic Visit, targeting Android users with apps primarily posing as messaging services. While these apps offer functional services as bait, they are bundled with the open-source XploitSPY malware. ESET has named this campaign eXotic Visit and has tracked its activities from November 2021 through to the … More ESET discovers targeted attack via fake messaging apps, available on web and Google Play

Silent but deadly: The rise of zero-click attacks

December 20, 2023

A security compromise so stealthy that it doesn’t even require your interaction? Yes, zero-click attacks require no action from you – but this doesn’t mean you’re left vulnerable. In a world of instant communication and accelerated by the ever-spreading notion that if you are not connected or available, you might be the odd one out, … More Silent but deadly: The rise of zero-click attacks

What’s behind the record‑high number of zero days?

May 3, 2022

Organizations need to get better at mitigating threats from unknown vulnerabilities, especially as both state-backed operatives and financially-motivated cybercriminals are increasing their activity. Zero-day vulnerabilities have always had something of a special reputation in the cybersecurity space. These software bugs are exploited for attacks before the flaw is known to the software vendor and so before a … More What’s behind the record‑high number of zero days?

Log4Shell: ESET blocks hundreds of thousands of attack attempts

December 21, 2021

ESET has detected hundreds of thousands of attack attempts globally that track to the critical Log4Shell vulnerability. Most attack attempts are located in the United States, the United Kingdom, and the Netherlands, yet nearly 180 countries and territories are under fire largely due to the global prevalence of the Log4j software library in systems around … More Log4Shell: ESET blocks hundreds of thousands of attack attempts