ESET links Cereal toolset to Turla in Romanian breach
CerealBox copied NATO and EU Word and PDF emails from servers ESET says were compromised in December 2025.
Stories per day · 30 days
6 RSS
Relatedbelarus2frostyneighbor2ukraine2wiper2cereal1deceptivedevelopment1drones1espionage1ghostwriter1lazarus1nato1north-korea1romania1supply-chain1turla1unc11511
32 stories, newest first · one card per story
Stories tagged #eset
ESET: Lazarus renews drone targeting; DeceptiveDevelopment hits repositories
The October 28 report covers April to September 2026 and says the two North Korea-aligned operations are distinct, not one coordinated campaign.
1
ESET: Belarus-linked FrostyNeighbor wipes Ukrainian transport manufacturer
UNC1151 used Chisel, UltraVNC, Cobalt Strike and a VBScript wiper delivered through Group Policy.
1
GhostWriter linked to first Belarus data wipe at Ukrainian firm
ESET ties FrostyNeighbor to the wipe and says Belarus-aligned operators increasingly mirror Russian priorities in Ukraine.
1
What to do when a data breach notice doesn't say much
ESET explains how to act on vague breach notices as US victim notices surge and details shrink.
4
MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2
UAC-0099's MATCHBOIL downloader evolved with sandbox checks, .NET Reactor obfuscation, scheduled-task persistence, and recurring C2, hitting Ukrainian transport and energy firms.
Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware
ESET documents two years of UAC-0099 upgrades to its MATCHBOIL downloader used in espionage against Ukrainian government, energy and transport sectors.
YouTubers targeted with fake sponsorships and “channel verification” phishing
Scammers phish YouTube creators with fake brand sponsorships to steal Google account credentials.
Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
UAC-0099 upgraded MatchBoil malware in espionage attacks on Ukrainian transport and energy firms.
MATCHBOIL: New tricks, same old evil intentions
ESET details MATCHBOIL, a C# downloader UAC-0099 uses against Ukrainian transport, manufacturing, and energy firms.
The quest for simplicity: Why SMBs want advanced protection without the complexity
ESET argues SMBs want advanced, simple cybersecurity and managed detection rather than more complex point tools.
This month in security with Tony Anscombe – September 2026 edition
ESET's September roundup covers AI agents hacking a government health database and Microsoft's 974 patches.
Timeshare exit scams: From fake buyers to recovery fraud
ESET details timeshare exit scams hitting owners trying to quit contracts: upfront-fee fraud, fake buyers, shell-LLC transfers, and double-dip recovery scams.
The devil is still in the email – but wearing a new mask
ESET details modern phishing evolution: QR codes, OAuth token theft via ConsentFix, ClickFix paste attacks, and deepfake-assisted BEC.
3
Looking for free Robux? Here’s what’s real, and what’s a scam
ESET warns free Robux generators, fake giveaways, and lookalike Roblox login pages steal children's credentials, personal data, and money.
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
ESET warns SMB AI agents face malicious skills and prompt injection while classic attacks still dominate breaches.
3
China’s FamousSparrow hackers target Latin America with new backdoor
ESET links a new SparroWocky backdoor campaign against Latin American government agencies to Chinese espionage group FamousSparrow.
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
China-aligned espionage group FamousSparrow replaced SparrowDoor with a new modular backdoor, SparroWocky, targeting government entities across eight Latin American countries since August 2025.
Chinese hackers use SparroWocky malware in govt espionage attacks
ESET reports China-linked FamousSparrow deployed a new modular backdoor, SparroWocky, in year-long espionage attacks on Latin American government organizations.
2
Cyberthreats are moving faster than SMBs: Readiness must accelerate
ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.
1
Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis
Russia-aligned group UAC-0099 embeds GuardBreaker prompt injection in a VBScript comment to make AI malware scanners refuse analysis of a MATCHBOIL loader.
4
Hackers Weaponize AI Safety Guardrails to Hide Malware From LLM-Powered Security Scanners
ESET says Russia-aligned actor UAC-0099 hid guardrail-triggering comments in VBScript to derail LLM-based malware scanners in Ukraine.
7
Top 10 Best Endpoint Encryption Software in 2026
A 2026 roundup of ten endpoint encryption products argues the engines are solved and buyers should choose management layers like Intune, Sophos, or Trellix.
5
Safe word: What is it and why do you need one?
ESET recommends pre-agreed family safe words to counter AI voice-clone scams such as virtual kidnapping, as one-in-four Americans report receiving deepfake calls.