WeLiveSecurity https://www.welivesecurity.com WeLiveSecurity en Forgotten UEFI shims undermining Secure Boot https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-boot/ ESET research https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-boot/ Tue, 14 Jul 2026 08:53:00 +0000 ESET Threat Report H1 2026 https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/ ESET research https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/ Wed, 08 Jul 2026 08:45:00 +0000 Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-alliances/ ESET research https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-alliances/ Thu, 25 Jun 2026 08:45:00 +0000 ESET takes part in Operation Endgame to disrupt Amadey and Stealc https://www.welivesecurity.com/en/eset-research/eset-takes-part-operation-endgame-disrupt-amadey-stealc/ ESET research https://www.welivesecurity.com/en/eset-research/eset-takes-part-operation-endgame-disrupt-amadey-stealc/ Wed, 24 Jun 2026 12:35:24 +0000 Killing me gently: Inside Gentlemen’s EDR killer framework https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-framework/ ESET research https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-framework/ Thu, 18 Jun 2026 09:46:32 +0000 FishMonger’s arsenal upgraded: SprySOCKS for Windows https://www.welivesecurity.com/en/eset-research/fishmongers-arsenal-upgraded-sprysocks-windows/ ESET research https://www.welivesecurity.com/en/eset-research/fishmongers-arsenal-upgraded-sprysocks-windows/ Tue, 16 Jun 2026 08:54:04 +0000 OceanLotus: From external espionage to domestic targeting https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targeting/ ESET research https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targeting/ Thu, 11 Jun 2026 08:45:00 +0000 ESET APT Activity Report Q4 2025–Q1 2026 https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q4-2025-q1-2026/ ESET research https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q4-2025-q1-2026/ Thu, 28 May 2026 08:45:00 +0000 Webworm: New burrowing techniques https://www.welivesecurity.com/en/eset-research/webworm-new-burrowing-techniques/ ESET research https://www.welivesecurity.com/en/eset-research/webworm-new-burrowing-techniques/ Wed, 20 May 2026 08:40:00 +0000 FrostyNeighbor: Fresh mischief and digital shenanigans https://www.welivesecurity.com/en/eset-research/frostyneighbor-fresh-mischief-digital-shenanigans/ ESET research https://www.welivesecurity.com/en/eset-research/frostyneighbor-fresh-mischief-digital-shenanigans/ Thu, 14 May 2026 08:50:00 +0000 Fake call logs, real payments: How CallPhantom tricks Android users https://www.welivesecurity.com/en/eset-research/fake-call-logs-real-payments-how-callphantom-tricks-android-users/ ESET research https://www.welivesecurity.com/en/eset-research/fake-call-logs-real-payments-how-callphantom-tricks-android-users/ Thu, 07 May 2026 08:51:19 +0000 A rigged game: ScarCruft compromises gaming platform in a supply-chain attack https://www.welivesecurity.com/en/eset-research/rigged-game-scarcruft-compromises-gaming-platform-supply-chain-attack/ ESET research https://www.welivesecurity.com/en/eset-research/rigged-game-scarcruft-compromises-gaming-platform-supply-chain-attack/ Tue, 05 May 2026 08:55:27 +0000 GopherWhisper: A burrow full of malware https://www.welivesecurity.com/en/eset-research/gopherwhisper-burrow-full-malware/ ESET research https://www.welivesecurity.com/en/eset-research/gopherwhisper-burrow-full-malware/ Thu, 23 Apr 2026 08:59:18 +0000 New NGate variant hides in a trojanized NFC payment app https://www.welivesecurity.com/en/eset-research/new-ngate-variant-hides-in-a-trojanized-nfc-payment-app/ ESET research https://www.welivesecurity.com/en/eset-research/new-ngate-variant-hides-in-a-trojanized-nfc-payment-app/ Tue, 21 Apr 2026 08:55:00 +0000 EDR killers explained: Beyond the drivers https://www.welivesecurity.com/en/eset-research/edr-killers-explained-beyond-the-drivers/ ESET research https://www.welivesecurity.com/en/eset-research/edr-killers-explained-beyond-the-drivers/ Thu, 19 Mar 2026 09:55:08 +0000 Sednit reloaded: Back in the trenches https://www.welivesecurity.com/en/eset-research/sednit-reloaded-back-trenches/ ESET research https://www.welivesecurity.com/en/eset-research/sednit-reloaded-back-trenches/ Tue, 10 Mar 2026 09:58:00 +0000 PromptSpy ushers in the era of Android threats using GenAI https://www.welivesecurity.com/en/eset-research/promptspy-ushers-in-era-android-threats-using-genai/ ESET research https://www.welivesecurity.com/en/eset-research/promptspy-ushers-in-era-android-threats-using-genai/ Thu, 19 Feb 2026 10:30:20 +0000 DynoWiper update: Technical analysis and attribution https://www.welivesecurity.com/en/eset-research/dynowiper-update-technical-analysis-attribution/ ESET research https://www.welivesecurity.com/en/eset-research/dynowiper-update-technical-analysis-attribution/ Fri, 30 Jan 2026 10:28:38 +0000 Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/ ESET research https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/ Wed, 28 Jan 2026 09:59:00 +0000 ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 https://www.welivesecurity.com/en/eset-research/eset-research-sandworm-cyberattack-poland-power-grid-late-2025/ ESET research https://www.welivesecurity.com/en/eset-research/eset-research-sandworm-cyberattack-poland-power-grid-late-2025/ Fri, 23 Jan 2026 16:58:26 +0000 Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/ ESET research https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/ Mon, 22 Dec 2025 09:55:00 +0000 LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan https://www.welivesecurity.com/en/eset-research/longnosedgoblin-tries-sniff-out-governmental-affairs-southeast-asia-japan/ ESET research https://www.welivesecurity.com/en/eset-research/longnosedgoblin-tries-sniff-out-governmental-affairs-southeast-asia-japan/ Thu, 18 Dec 2025 10:00:00 +0000 ESET Threat Report H2 2025 https://www.welivesecurity.com/en/eset-research/eset-threat-report-h2-2025/ ESET research https://www.welivesecurity.com/en/eset-research/eset-threat-report-h2-2025/ Tue, 16 Dec 2025 09:50:45 +0000 MuddyWater: Snakes by the riverbank https://www.welivesecurity.com/en/eset-research/muddywater-snakes-riverbank/ ESET research https://www.welivesecurity.com/en/eset-research/muddywater-snakes-riverbank/ Tue, 02 Dec 2025 10:00:15 +0000 PlushDaemon compromises network devices for adversary-in-the-middle attacks https://www.welivesecurity.com/en/eset-research/plushdaemon-compromises-network-devices-for-adversary-in-the-middle-attacks/ ESET research https://www.welivesecurity.com/en/eset-research/plushdaemon-compromises-network-devices-for-adversary-in-the-middle-attacks/ Wed, 19 Nov 2025 09:55:00 +0000