ESET - Security Ticks

New phishing method targets Android and iPhone users

Android, cybercrime, cybersecurity, ESET, Google Play, iOS, iPhone, News, phishing / SecurityTicks

New phishing method targets Android and iPhone users 2024-08-20 at 17:33 By Help Net Security ESET researchers discovered an uncommon type of phishing campaign targeting Android and iPhone users. They analyzed a case observed in the wild that targeted clients of a prominent Czech bank. PWA phishing flow (Source: ESET) This technique is noteworthy because […]

React to this headline:

New phishing method targets Android and iPhone users Read More »

Chinese hackers compromised an ISP to deliver malicious software updates

APT, cyber espionage, DNS, Don't miss, ESET, Hot stuff, ISP, Malware, News, supply chain compromise, Symantec, Volexity / SecurityTicks

Chinese hackers compromised an ISP to deliver malicious software updates 2024-08-05 at 13:46 By Zeljka Zorz APT StormBamboo compromised a undisclosed internet service provider (ISP) to poison DNS queries and thus deliver malware to target organizations, Volexity researchers have shared. Malware delivery via automatic software updates StormBamboo (aka Evasive Panda, aka StormCloud), a Chinese-speaking threat

React to this headline:

Chinese hackers compromised an ISP to deliver malicious software updates Read More »

Vulnerability in Telegram app for Android allows sending malicious files disguised as videos

cybercrime, ESET, exploit, News / SecurityTicks

Vulnerability in Telegram app for Android allows sending malicious files disguised as videos 2024-07-23 at 12:16 By Help Net Security ESET researchers discovered a zero-day exploit, which targets the Telegram app for Android, that appeared for sale for an unspecified price in an underground forum post from June 2024. Example of how the EvilVideo exploit

React to this headline:

Vulnerability in Telegram app for Android allows sending malicious files disguised as videos Read More »

Ad-injecting malware posing as DwAdsafe ad blocker uses Microsoft-signed driver

browser, cybersecurity, drivers, ESET, Malware, News, report / SecurityTicks

Ad-injecting malware posing as DwAdsafe ad blocker uses Microsoft-signed driver 2024-07-22 at 06:01 By Help Net Security ESET Research has discovered a sophisticated Chinese browser injector: a signed, vulnerable, ad-injecting driver from a mysterious Chinese company. This threat, which ESET dubbed HotPage, comes self-contained in an executable file that installs its main driver and injects

React to this headline:

Ad-injecting malware posing as DwAdsafe ad blocker uses Microsoft-signed driver Read More »

Update: Worldwide IT outage due to buggy Crowdstrike update

BH Consulting, Brian Honan, CrowdStrike, cyber resilience, disruption, Don't miss, ESET, Hot stuff, Hunter Strategy, News, Performanta, SANS ISC, Windows / SecurityTicks

Update: Worldwide IT outage due to buggy Crowdstrike update 2024-07-19 at 19:46 By Zeljka Zorz The world is 16+ hours into what looks like the biggest IT outage in history, triggered by a defective update for Crowdstrike endpoint security software for Windows machines. The price of both Crowdstrike’s and Microsoft’s shares tumbled down as a

React to this headline:

Update: Worldwide IT outage due to buggy Crowdstrike update Read More »

Infostealing malware masquerading as generative AI tools

cybercrime, ESET, generative AI, Malware, News, report, survey / SecurityTicks

Infostealing malware masquerading as generative AI tools 2024-07-05 at 08:01 By Help Net Security Over the past six months, there has been a notable surge in Android financial threats – malware targeting victims’ mobile banking funds, whether in the form of ‘traditional’ banking malware or, more recently, cryptostealers, according to ESET. Vidar infostealer targets Windows

React to this headline:

Infostealing malware masquerading as generative AI tools Read More »

Ebury botnet compromises 400,000+ Linux servers

backdoor, botnet, cybercrime, Don't miss, ESET, Linux, Malware, News / SecurityTicks

Ebury botnet compromises 400,000+ Linux servers 2024-05-16 at 07:31 By Help Net Security ESET researchers released its deep-dive investigation into one of the most advanced server-side malware campaigns. It is still growing and has seen hundreds of thousands of compromised servers in its at least 15-year-long operation. The Ebury group and botnet have been involved

React to this headline:

Ebury botnet compromises 400,000+ Linux servers Read More »

ESET launches two MDR subscription tiers for SMBs and enterprises

ESET, Industry news / SecurityTicks

ESET launches two MDR subscription tiers for SMBs and enterprises 2024-04-30 at 12:31 By Industry News ESET launched two new Managed Detection and Response (MDR) subscription tiers: ESET PROTECT MDR for small and medium businesses (SMBs) and ESET PROTECT MDR Ultimate for enterprises. These offerings are built on the foundation of ESET PROTECT Elite and

React to this headline:

ESET launches two MDR subscription tiers for SMBs and enterprises Read More »

ESET integrates with Arctic Wolf to provide greater security visibility

Arctic Wolf Networks, ESET, Industry news / SecurityTicks

ESET integrates with Arctic Wolf to provide greater security visibility 2024-04-25 at 14:31 By Industry News ESET has unveiled a new integration with Arctic Wolf, to ensure increased visibility and protection against modern threats. By integrating ESET Inspect into Arctic Wolf’s Security Operations Platform, Arctic Wolf customers are able to enhance their security posture –

React to this headline:

ESET integrates with Arctic Wolf to provide greater security visibility Read More »

ESET Small Business Security offers protection against online fraud, data theft and human error

ESET, Industry news / SecurityTicks

ESET Small Business Security offers protection against online fraud, data theft and human error 2024-04-09 at 17:31 By Industry News ESET introduced ESET Small Business Security, which has been specifically designed to meet the cybersecurity needs of Small Office/Home Office business owners. According to the Small Business Administration, out of the 33.3 million small businesses

React to this headline:

ESET Small Business Security offers protection against online fraud, data theft and human error Read More »

Growing AceCryptor attacks in Europe

cybercrime, cybersecurity, Email, ESET, EU, Europe, Malware, News, Remote Access Trojan / SecurityTicks

Growing AceCryptor attacks in Europe 2024-03-20 at 13:01 By Help Net Security ESET Research has recorded a considerable increase in AceCryptor attacks, with detections tripling between the first and second halves of 2023. In recent months, researchers registered a significant change in how AceCryptor is used, namely that the attackers spreading Rescoms (also known as

React to this headline:

Growing AceCryptor attacks in Europe Read More »

ESET Patches High-Severity Privilege Escalation Vulnerability

ESET, Vulnerabilities, vulnerability / SecurityTicks

ESET Patches High-Severity Privilege Escalation Vulnerability 2024-02-15 at 17:02 By Ionut Arghire ESET has released patches for a high-severity elevation of privilege vulnerability in its Windows security products. The post ESET Patches High-Severity Privilege Escalation Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

ESET Patches High-Severity Privilege Escalation Vulnerability Read More »

Blackwood APT delivers malware by hijacking legitimate software update requests

backdoor, China, cyber espionage, Don't miss, ESET, hijacking, Japan, Malware, MITM, News, UK / SecurityTicks

Blackwood APT delivers malware by hijacking legitimate software update requests 2024-01-25 at 13:32 By Help Net Security ESET researchers have discovered NSPX30, a sophisticated implant used by a new China-aligned APT group, which they dubbed Blackwood. Blackwood has carried out cyberespionage operations against individuals and companies from China, Japan, and the United Kingdom. It leverages

React to this headline:

Blackwood APT delivers malware by hijacking legitimate software update requests Read More »

ESET launches MDR service to improve cybersecurity for SMBs

ESET, Industry news / SecurityTicks

ESET launches MDR service to improve cybersecurity for SMBs 2024-01-18 at 15:01 By Industry News ESET launched ESET MDR, an innovative solution aimed at addressing the evolving cybersecurity challenges faced by SMBs. This launch marks a significant stride in expanding ESET’s security services portfolio with another MDR solution. In a rapidly changing threat landscape, organizations

React to this headline:

ESET launches MDR service to improve cybersecurity for SMBs Read More »

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature

Endpoint Security, ESET, security product vulnerability, vulnerability / SecurityTicks

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature 21/12/2023 at 16:31 By Eduard Kovacs ESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted. The post ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature appeared first on SecurityWeek. This article is an excerpt

React to this headline:

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature Read More »

OilRig targets Israel organizations with new lightweight downloaders

cyber espionage, cybercrime, cybersecurity, ESET, Israel, News / SecurityTicks

OilRig targets Israel organizations with new lightweight downloaders 15/12/2023 at 14:55 By Help Net Security ESET researchers analyzed a growing series of new OilRig downloaders that the group used in several campaigns throughout 2022 to maintain access to target organizations of special interest, all located in Israel. They include an organization in the healthcare sector,

React to this headline:

OilRig targets Israel organizations with new lightweight downloaders Read More »

Product showcase: New ESET Home Security

antivirus, cybersecurity, Don't miss, ESET, News, Product showcase, software / SecurityTicks

Product showcase: New ESET Home Security 28/11/2023 at 07:32 By Help Net Security ESET is thrilled to announce our new cutting-edge consumer solutions. Our consumer offering is more than just security – it is a comprehensive portfolio designed to keep our customers safe in today’s digital landscape. We are dedicated to advancing technology without compromising

React to this headline:

Product showcase: New ESET Home Security Read More »

10 corporate cybersecurity blogs worth your time

Akamai, AT&T Cybersecurity, AWS, Cloudflare, cybersecurity, Don't miss, Dropbox, ESET, GitHub, Google Cloud, Hot stuff, IBM, Intel, Mandiant, News, Sophos / SecurityTicks

10 corporate cybersecurity blogs worth your time 14/11/2023 at 09:02 By Help Net Security In this article, we’ve curated a list of insightful corporate cybersecurity blogs that provide analysis and actionable advice to help you keep your company’s digital assets secure. This list is not meant to be exhaustive since thousands of companies have infosec

React to this headline:

10 corporate cybersecurity blogs worth your time Read More »

Valve introduces SMS-based confirmation to prevent malicious games on Steam

authentication, Don't miss, ESET, Hot stuff, MFA, News, security update, software development, Steam / SecurityTicks

Valve introduces SMS-based confirmation to prevent malicious games on Steam 17/10/2023 at 16:32 By Helga Labus Video game publisher/digital distribution company Valve is forcing developers who publish games on its Steam platform to “validate” new builds with a confirmation code received via SMS. The Steam SMS confirmation requirement Valve sent out notices last month to

React to this headline:

Valve introduces SMS-based confirmation to prevent malicious games on Steam Read More »

Lazarus impersonated Meta recruiter to breach Spanish aerospace firm

APT, backdoor, cyber espionage, ESET, News, spear-phishing / SecurityTicks

Lazarus impersonated Meta recruiter to breach Spanish aerospace firm 02/10/2023 at 11:48 By Help Net Security Operators of the North Korea-linked Lazarus APT obtained initial access to the network of an aerospace company in Spain last year after a successful spearphishing campaign, by masquerading as a recruiter for Meta — the company behind Facebook, Instagram,

React to this headline:

Lazarus impersonated Meta recruiter to breach Spanish aerospace firm Read More »