ESET researchers have been tracking Trickbot's activities since late 2016. One of the oldest Trickbot plugins uses web injects mainly targeting financial institutions.
Named XDSpy by ESET, the new APT group has been stealing from several governments in Eastern Europe and the Balkans largely undetected for nine years, which is rare.
Even though Latin American banking trojans can be looked upon as one homogeneous group of malware, ESET reports that multiple distinct malware families can be recognized.
A new version of Android spyware used by the APT-C-23 threat group has extended espionage functionality, new stealth features and updated C&C communication.
CDRThief is entirely new Linux malware that targets two VoIP platforms used by two China-made softswitches (software switches), Linknat VOS2009 and VOS3000, in order to exfiltrate call detail records.
ESET researchers have discovered a a triple threat to mine coins. KryptoCibule tries to hijack transactions by replacing wallet addresses in the clipboard and exfiltrating cryptocurrency-related...