ToddyCat: APT Group Exploiting ESET Search-Order Flaw
ToddyCat is an advanced persistent threat group that exploited a search-order flaw in ESET's command-line scanner to load malicious DLLs. This was…
Tag: ESET
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Security researcher Bert-Jan Pals analyzed roughly 3,000 live ClickFix payloads and presented findings at OrangeCon in early June, publishing details on June…
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
Russian APT group Gamaredon has continued its cyber onslaught against Ukraine throughout 2025, deploying new malware and increasingly abusing legitimate cloud services.…
CVE-2026-8863: UEFI Shim Bootloader Vulnerability
CVE-2026-8863 is a vulnerability in old Microsoft-signed UEFI shim bootloaders that allows attackers to bypass Secure Boot protections and execute arbitrary code…
OceanLotus Targets Vietnam Investors With SPECTRALVIPER in FireAnt Supply Chain Attack
ESET has uncovered two campaigns by the Vietnam-aligned threat actor OceanLotus (APT32) targeting domestic entities and stock investors with the SPECTRALVIPER backdoor.…
The Gentlemen RaaS Deploys GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands…
Amadey and StealC Malware Network Disrupted: 27 Million Stolen Credentials Recovered
A coordinated international law enforcement operation, supported by private sector partners including Bitdefender, Bitsight, ESET, and Microsoft, has successfully dismantled the criminal…
ESET: Security Vendor and Target of Side-Loading
ESET is a cybersecurity company whose products, including ESET Management Agent, have been abused for DLL side-loading by threat actors like ToddyCat.…