Industroyer: A cyber‑weapon that brought down a power grid

Five years ago, ESET researchers released their analysis of the first ever malware that was designed specifically to attack power grids. On June 12th 2017, ESET researchers published their findings about unique malware that was capable of causing a widespread blackout. Industroyer, as they named it, was the first known piece of malware that was developed specifically to … More Industroyer: A cyber‑weapon that brought down a power grid

Industroyer2: Industroyer reloaded

This ICS-capable malware targets a Ukrainian energy company. Executive summary The blogpost presents the analysis of a cyberattack against a Ukrainian energy provider. Key points: ESET researchers collaborated with CERT-UA to analyze the attack against the Ukrainian energy company The destructive actions were scheduled for 2022-04-08 but artefacts suggest that the attack had been planned … More Industroyer2: Industroyer reloaded

ESET Research discovers Mustang Panda’s Hodur cyberespionage malware: Old tricks, new Korplug variant

Mustang Panda, the cyberespionage group behind this threat, is targeting mainly governmental entities and NGOs in East and Southeast Asia, and some in Europe and Africa. · This cyberespionage campaign dates back to at least August 2021 and is still ongoing as of March 2022. · Mustang Panda, the APT group behind this campaign, is … More ESET Research discovers Mustang Panda’s Hodur cyberespionage malware: Old tricks, new Korplug variant

Addicted to the news? Doomscrolling through reality

Humans can have a weird fascination with catastrophe, whether they’re reveling in grotesque depictions of demons as found in the art of the Middle Ages or avidly watching horror films of the 20th and 21st centuries. Undoubtedly, there is a psychological element to this fascination. Our brains are “wired” to learn from experiences. This is … More Addicted to the news? Doomscrolling through reality

CaddyWiper: New wiper malware discovered in Ukraine

This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malware taking aim at Ukrainian organizations. ESET researchers have uncovered yet another destructive data wiper that was used in attacks against organizations in Ukraine. Dubbed CaddyWiper by ESET analysts, the malware was first detected at 11.38 a.m. … More CaddyWiper: New wiper malware discovered in Ukraine