Lazarus targeted several companies active in the defense industry in Central and Southeastern Europe.

ESET Research has uncovered two previously undocumented Android spyware families, which ESET has named Android/Spy.ProSpy and Android/Spy.ToSpy.

ESET Research released a deep dive report into the activities of the DeceptiveDevelopment threat group and North Korean IT workers, which are considered tightly bound.

ESET Research has uncovered the first known cases of collaboration between Gamaredon and Turla. Both groups are affiliated with Russia’s main domestic intelligence and security agency.

ESET Research has discovered new ransomware samples, which it has named HybridPetya, able to compromise modern UEFI-based systems.

In June 2025, this threat actor compromised at least 65 Windows servers, mainly in Brazil, Thailand, Vietnam, and the United States.