#ESETresearch: Since January 2026, #ESET has prevented over 700,000 compromise attempts from #Cruciferra, a cryptor MaaS unique in the sheer variety of decryption routines it employs. Most affected countries: 🇹🇷 Türkiye, 🇬🇷 Greece, 🇪🇸 Spain. 1/6

#ESETresearch has uncovered Cereal, a previously undocumented modular .NET toolset used by the Russia-aligned #Turla #APTgroup to turn victims’ Microsoft Exchange servers into stealthy long-term collection points. welivesecurity.com/en/eset-resear… 1/6

🥣 This Cereal is definitely not for breakfast.
 
@ESETresearch esearch uncovered a previously undocumented cyberespionage toolset targeting Microsoft Exchange servers. Attributed with high confidence to the Russia-aligned APT group Turla, Cereal can collect selected emails, ory and use the victim’s own Exchange server as its command-and-control infrastructure.
 
Discover the novel techniques behind this sophisticated toolset. 👇
 
Read the full analysis 🔗 welivesecurity.com/en/eset-resear……
 
#ESET #ProgressProtected #ESETresearch

📷"Your iPhone is infected!" ​

Before you panic: that warning is probably fake.​ Unfortunately, online scams and malicious websites are not. ​ ​

ESET Mobile Security for iOS helps protect you from phishing, unsafe networks, and other common threats targeting iPhone users SET Cybersecurity.​
Expert-led. ​AI-powered.

📷 Read more here: eset.com/blog/en/home-t…

#ESETMobileSecurity #iOS #Cybersecurity

Cybercriminals know how to exploit trust. We dig into this more on this week’s Cyber Chatter segment on The AmberMac Show podcast, presented by @ESET, with Chief Security Evangelist @TonyAtESET.

Get the full episode wherever you get your podcasts. cc @jeffmacarthur

Even legitimate software can become an unexpected way in for attackers.
 
@ESETresearch uncovered a cyberespionage campaign targeting users of the popular Sogou Input Method. Attackers were able to redirect legitimate internet traffic and use the software to deliver spyware to Asia and Europe.
 
See how the campaign worked. 👉 welivesecurity.com/en/eset-resear……
 
#ESET #ESETResearch #CyberEspionage #ProgressProtected

Coming up on this week's NEW The @AmberMac Show: @jeffmacarthur & I discuss the Canadian government's AI plans with @cohere, @ESET's @TonyAtESET on protecting yourself from AI cybercrimes, and why Instagram is chasing YouTube.

📻 Tuesday - 2 pm on @CanadaTalks160
🎧 Wednesday - Podce

#ESETresearch has identified #Gorbag, a Russia-aligned 🇷🇺 threat actor that uses simple infostealers and a reverse shell to harvest data from Ukrainian 🇺🇦 organizations near the front line: welivesecurity.com/en/eset-resear… 1/6

PHP2Shell. Compromised supermarket refrigeration systems. A breach exposing 8.8 million people. Malware preinstalled on Android phones. October was a busy month in cybersecurity. 
 
@TonyAtESET breaks down the stories that stood out and the lessons businesses can take from them. edition of Month in Security.

#Cybersecurity #ESET

#ESETresearch APT Activity Report (Apr–Sep 2026): Russia-aligned APTs continued targeting 🇺🇦 Ukrainian defense, government, and infrastructure entities. #Gamaredon deployed #Turla’s new VBScript reconnaissance tool #Rezzuar – confirming continued FSB-linked collaboration. 1/4

#ESETresearch released the latest #ESETAPTActivityReport (Apr–Sep 2026): 🇧🇾 Belarus-aligned APT groups are converging with Russia'’s war priorities; for the first time, we documented a destructive cyberattack by a Belarus-aligned group in 🇺🇦 Ukraine web-assets.esetstatic.com/wls/en/papers/… 1/3

What happens when the MSP community comes together? 👀

Fresh perspectives, honest conversations and plenty of thoughts worth sharing. 💡
We caught up with attendees at MSP Global, including Dave Maasland, to hear what’s shaping the MSP world right now.
🎥 Hear what they had to Kieran Abretti, Stef Greijmans

#MSPGlobal #ESET #MSP #Cybersecurity

AI made scams smarter ⚠️​

Don’t let them catch you off guard.​

​So… what’s your next move? 👉 Think before you click.​

👉 Stay one step ahead: eset.com/blog/en/home-t…

​Choose ESET Cybersecurity.​

Expert-led.​ AI-powered.

#ESET #ProgressProtected

PHP2Shell moved from disclosure to real-world exploitation fast. ⚠️
 
CVE-2026-109618 and CVE-2026-109619, dubbed “PHP2Shell,” require attention now. CISA recommends immediately patching affected PHP installations and prioritizing internet-facing systems. 
 
In our latest onyAtESET explains what security teams need to know and what actions to prioritize.
 
▶️ Watch now and get up to speed. 
 
#ESET #PHP2Shell #VulnerabilityManagement

Scams are getting smarter, powered by AI ⚠️​

Your protection should be too.​

​The new ESET HOME Security helps keep you safe from AI-driven scams, malicious links, and hidden threats.​

So… what’s your next move?​

​👉 Stay ahead at eset.com and read more f

Choose ESET Cybersecurity.​
Expert-led. ​AI-powered.

​#ESET #ProgressProtected

An inspiring speech by the Nobel Prize Serge Haroche at the @ESET Science Award Gala on AI as a powerful tool for scientific discovery, particularly when combined with uniquely human qualities such as emotion, intuition, and our sensory perception of the world ❣️

#ESETresearch uncovered #MythicRatatoskr, an undocumented Go backdoor hiding its C&C server inside the #Yggdrasil mesh network. It was used against a Ukrainian 🇺🇦 grain logistics firm in an intrusion that ended in a destructive #Sandworm attack.
welivesecurity.com/en/eset-resear… 1/6

#ESETresearch has analyzed the evolution of #MATCHBOIL, a C# downloader used by the 🇷🇺 Russia-aligned APT group UAC-0099 to download, install, and persist another payload. @reib3n1 welivesecurity.com/en/eset-resear… 1/7

What if a malicious npm package doesn't execute malware itself — but turns your trusted AI assistant into an RCE attack vector? Our research uncovered 3 malicious npm packages targeting ChatGPT/Codex and Anthropic Claude. Here's what we found. 👇