This blog post will be a reflection on our recent experience of porting a reasonably large (~30KLOC) JRuby application to Google Go, talking about the many things we liked about the language and ecosystem, and the couple of things that… Read More "Our Experience with Golang | UpGuard"
Every company outsources parts of its operations to multiple suppliers. Those suppliers, in turn, outsource their operations to other suppliers. This is fourth-party risk. The risk to your company posed by suppliers’ suppliers. Digital transformation has extended to the supply… Read More "What is Fourth-Party Risk? | UpGuard"
A North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims’ crypto wallets and steals their login details from web browsers and password managers 20 Feb 2025 ESET researchers have observed a malicious campaign where North Korea-aligned threat actors,… Read More "Fake job offers target coders with infostealers"
Here’s what’s been hot on the AI scene over the past 12 months, how it’s changing the face of warfare, and how you can fight AI-powered scams Source link Read More "AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1)"
In August 2024, ESET researchers detected cyberespionage activity carried out by the China-aligned MirrorFace advanced persistent threat (APT) group against a Central European diplomatic institute in relation to Expo 2025, which will be held in Osaka, Japan. Known primarily for… Read More "MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor"
The group’s Operation AkaiRyū begins with targeted spearphishing emails that use the upcoming World Expo 2025 in Osaka, Japan, as a lure 18 Mar 2025 The China-aligned MirrorFace APT group has targeted a Central European diplomatic institute, marking the first… Read More "MirrorFace updates toolset, expands reach to Europe"
On March 5th, 2025, the US DOJ unsealed an indictment against employees of the Chinese contractor I‑SOON for their involvement in multiple global espionage operations. Those include attacks that we previously documented and attributed to the FishMonger APT group –… Read More "Operation FishMedley targeting governments, NGOs, and think tanks"
In July 2024, ESET Research noticed suspicious activity on the system of a trade group in the United States that operates in the financial sector. While helping the affected entity remediate the compromise, we made an unexpected discovery in the… Read More "You will always remember this as the day you finally caught FamousSparrow"
ESET researchers take a look back at the significant changes in the ransomware ecosystem in 2024 and focus on the newly emerged and currently dominating ransomware-as-a-service (RaaS) gang, RansomHub. We share previously unpublished insights into RansomHub’s affiliate structure and uncover… Read More "Shifting the sands of RansomHub’s EDRKillShifter"
Once thought to be dormant, the China-aligned group has also been observed using the privately-sold ShadowPad backdoor for the first time 27 Mar 2025 The FamousSparrow APT group has infiltrated a trade group in the financial sector in the United… Read More "FamousSparrow resurfaces to spy on targets in the US, Latin America"
