ESET Research’s tracking of OceanLotus activities from 2024–2026 has revealed a more selective approach to external operations.

The majority of SMBs feel confident in their cyber resilience and satisfied with cybersecurity budgets.

ESET Research has released its latest APT Activity Report covering October 2025 – March 2026

Chief among their latest tools are two new backdoors: the Discord-based EchoCreep and the Microsoft Graph-based GraphWorm.

This latest ESET Research report documents new activity observed that started in March 2026, showing continued evolution of tooling and compromise chains.

CallPhantom, falsely claims to provide access to call logs, SMS records, and WhatsApp call history for any phone number in exchange for payment.