ESET Research Podcast: HotPage

ESET researchers discuss HotPage, a recently discovered adware armed with a highest-privilege, yet vulnerable, Microsoft-signed driver. Usually when someone mentions adware, people think of low-quality half-baked malicious code used to spam victims with sketchy ads. But as we explain in this episode of our podcast, not all adware is created equal. HotPage is a recently … More ESET Research Podcast: HotPage

The key considerations for cyber insurance: A pragmatic approach

Would a more robust cybersecurity posture impact premium costs? Does the policy offer legal cover? These are some of the questions organizations should consider when reviewing their cyber insurance options. There must be a consideration of the ethical question of contributing to the payment of extortion demands of cybercriminals. Any company that is paying a … More The key considerations for cyber insurance: A pragmatic approach

In plain sight: Malicious ads hiding in search results

Sometimes there’s more than just an enticing product offer hiding behind an ad. One thing is true: Malware developers are deeply invested in improving their malware and exploring different ways to compromise end users. Malware spreading through ads is nothing new; for a long time, cybercriminals have had their sights fixed on online advertising networks as a distribution … More In plain sight: Malicious ads hiding in search results

ESET Research: Spy group exploits WPS Office zero day; analysis uncovers a second vulnerability

ESET researchers discovered a remote code execution vulnerability in WPS Office for Windows (CVE-2024-7262). The vulnerability was being exploited by APT-C-60, allegedly a South Korea-aligned cyberespionage group, to target East Asian countries. When examining the root cause, ESET discovered another way to exploit the faulty code (CVE-2924-7263). Following a coordinated disclosure process, both vulnerabilities are … More ESET Research: Spy group exploits WPS Office zero day; analysis uncovers a second vulnerability

Beware of Ticket Scammers on Social Media: Don’t Let Fake Promises Ruin Your Concert Experience

As the excitement builds for Coldplay’s upcoming gigs at Croke Park and fans eagerly await tickets for the much-anticipated Oasis reunion in 2025, the spectre of ticket scammers looms larger than ever. These opportunistic fraudsters are perfectly poised to exploit the fervour of fans desperate to catch their favourite bands live. The Allure of Last-Minute … More Beware of Ticket Scammers on Social Media: Don’t Let Fake Promises Ruin Your Concert Experience