A new cyberattack campaign has been uncovered involving trojanized ESET security software installers that deliver Cobalt Strike beacons to Windows users. This sophisticated attack targets users by distributing malicious versions of legitimate ESET antivirus installers, which when executed, deploy Cobalt Strike, a well-known penetration testing tool often abused by threat actors for post-exploitation activities. The attackers leverage this method to gain unauthorized access and control over victim systems, potentially leading to data breaches and further malware deployment. Security researchers emphasize the importance of downloading software only from official sources and maintaining updated antivirus solutions to mitigate such threats. This incident highlights the evolving tactics of cybercriminals who exploit trusted software brands to bypass security measures and infiltrate networks. Organizations and individuals alike are urged to remain vigilant and implement robust cybersecurity practices to defend against these emerging threats.
This Cyber News was published on thehackernews.com. Publication date: Mon, 10 Nov 2025 01:29:02 +0000