The group’s Operation AkaiRyū begins with targeted spearphishing emails that use the upcoming World Expo 2025 in Osaka, Japan, as a lure 18 Mar 2025 The China-aligned MirrorFace APT group has targeted a Central European diplomatic institute, marking the first… Read More "MirrorFace updates toolset, expands reach to Europe"
On March 5th, 2025, the US DOJ unsealed an indictment against employees of the Chinese contractor I‑SOON for their involvement in multiple global espionage operations. Those include attacks that we previously documented and attributed to the FishMonger APT group –… Read More "Operation FishMedley targeting governments, NGOs, and think tanks"
In July 2024, ESET Research noticed suspicious activity on the system of a trade group in the United States that operates in the financial sector. While helping the affected entity remediate the compromise, we made an unexpected discovery in the… Read More "You will always remember this as the day you finally caught FamousSparrow"
ESET researchers take a look back at the significant changes in the ransomware ecosystem in 2024 and focus on the newly emerged and currently dominating ransomware-as-a-service (RaaS) gang, RansomHub. We share previously unpublished insights into RansomHub’s affiliate structure and uncover… Read More "Shifting the sands of RansomHub’s EDRKillShifter"
Once thought to be dormant, the China-aligned group has also been observed using the privately-sold ShadowPad backdoor for the first time 27 Mar 2025 The FamousSparrow APT group has infiltrated a trade group in the financial sector in the United… Read More "FamousSparrow resurfaces to spy on targets in the US, Latin America"
ESET researchers also examine the growing threat posed by tools that ransomware affiliates deploy in an attempt to disrupt EDR security solutions 27 Mar 2025 ESET research has released a deep-dive analysis of changes in the ransomware ecosystem in 2024,… Read More "RansomHub affiliates linked to rival RaaS providers"
Security awareness training doesn’t have to be a snoozefest – games and stories can help instill ‘sticky’ habits that will kick in when a danger is near 28 Mar 2025 • , 5 min. read Let me preface this with… Read More "How to get the most out of cybersecurity training"
Posted by Jianing Sandra Guo, Product Manager and Nataliya Stanetsky, Staff Program Manager, Android Janine Roberta Ferreira was driving home from work in São Paulo when she stopped at a traffic light. A man suddenly appeared and broke the window… Read More "Bringing new theft protection features to Android users around the world"
Business Security Ransomware Your company’s ability to tackle the ransomware threat head-on can ultimately be a competitive advantage 31 Mar 2025 • , 3 min. read “Everybody has a plan until they get punched in the mouth.” Mike Tyson’s punchy… Read More "A key to business survival"
Posted by Alex Rebert, Security Foundations, and Chandler Carruth, Jen Engel, Andy Qin, Core Developers Error-prone interactions between software and memory1 are widely understood to create safety issues in software. It is estimated that about 70% of severe vulnerabilities2 in… Read More "Google Online Security Blog: Safer with Google: Advancing Memory Safety"
