MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.

A view of the H2 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

ESET researchers discovered a China-aligned APT group, LongNosedGoblin, which uses Group Policy to deploy cyberespionage tools across networks of governmental institutions.

ESET researchers provide a comprehensive analysis and assessment of a critical severity vulnerability with low likelihood of mass exploitation.

The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper.

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.

ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector.

ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow.

ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.

ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers.

ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI.

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions.