ESET Research Podcast: HotPage

ESET researchers discuss HotPage, a recently discovered adware armed with a highest-privilege, yet vulnerable, Microsoft-signed driver. Usually when someone mentions adware, people think of low-quality half-baked malicious code used to spam victims with sketchy ads. But as we explain in this episode of our podcast, not all adware is created equal. HotPage is a recently … More ESET Research Podcast: HotPage

Locked Shields 2024: Ancient inspiration deployed for today’s complex digital battlegrounds

Is it strange that cybersecurity companies would be called to share their expertise in a military simulation of today’s digital battlespace? The answer seems to be a resounding no. However, despite being civilian organisations that don’t drill cyber-military scenarios, full-stack cybersecurity companies consider every day to be the real thing, with malware researchers, threat monitoring … More Locked Shields 2024: Ancient inspiration deployed for today’s complex digital battlegrounds

ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

ESET researchers have identified five campaigns that employ trojanised apps to target Android users. ESET Research discovered multistage Android malware, which ESET named AridSpy, being distributed via five dedicated websites. ESET detected occurrences of AridSpy in both Palestine and Egypt and attribute it, with medium confidence, to the Arid Viper APT group. AridSpy’s code is, … More ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

Hackers use fake OnlyFans pics to drop info-stealing malware

According to Bleeping Computer*, a malware campaign is using fake OnlyFans content and adult lures to install a remote access trojan known as ‘DcRAT,’ allowing threat actors to steal data and credentials or deploy ransomware on the infected device. The new campaign discovered by eSentire has been underway since January 2023, spreading ZIP files that … More Hackers use fake OnlyFans pics to drop info-stealing malware