ESET APT Activity Report Q4 2025–Q1 2026
ESET ResearchThreat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4...
ESET
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
Google Play Scam Apps Hit 7.3M Downloads with Fake Call Logs
ESET found 28 CallPhantom scam apps on Google Play that promised fake call logs and had reached more than 7.3...
GopherWhisper: A burrow full of malware
ESET Research ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions...
GopherWhisper: A burrow full of malware
ESET Research ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions...
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,...
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,...
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers uncovered the first known case of Android malware abusing generative AI for context-aware user interface manipulation. While machine...
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan
ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses...
ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
ESET Research The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper ESET Research 23 Jan...
