EDR killers explained: Beyond the drivers
ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers
The resurgence of one of Russia’s most notorious APT groups
ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow
ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector
ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper
ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data
ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights
ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen
ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness
A shift in operational pattern of the infamous Vietnam-aligned APT group
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026