Hello.

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off to Sandworm, which then conducted a data-wiping attack on September 17th, 2025. It particularly focuses on the MythicRatatoskr backdoor,

You can trust a social media platform and still get scammed by an ad running on it Fraudulent ads have been around for about as long as the advertising industry. Today, they often reach you through social media feeds, apps and search results you use every day, and the platforms showing them can also (inadvertently) help build them. In September, the US Federal Trade Commission (FTC) asked whether platforms should be required to stop impersonation scam ads from ever reaching c

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious In September, reports emerged that a Virginia woman had been submerged by a flood of emails. Hundreds of automated messages poured in over a 24-hour period, including newsletters and promotions she’d never signed up to. But this was no ordinary spam campaign. The real reason behind the inbox blitz was to bury a legitimate email from the victim’s bank warning her ab

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next. Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they’re written on? Increasingly, they lack crucial details. As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up

Two critical security vulnerabilities in PHP have triggered urgent warnings for website owners and IT teams worldwide. The technology behind a large part of the internet is facing a serious security challenge. PHP, a programming language widely used to build websites and web applications, has been affected by two critical vulnerabilities that could allow attackers to take control of vulnerable servers remotely. The flaws, identified as CVE-2026-109618 and CVE-2026-109619 and

Gartner® explores how geopolitical, regulatory, and tech risks reshape European digital control. Significant changes in the geopolitical landscape are increasingly forcing European businesses to reconsider their technology dependencies. Questions about who controls critical services, which laws apply, and whether access could be disrupted or even halted have become part of the business continuity planning conversation. Conversations around digital sovereignty have expanded be

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026 ESET researchers have documented the evolution of the MATCHBOIL malware, a custom C# downloader wielded by the Russia-aligned UAC-0099 APT group. The malware is used to download a payload from the group’s C&C server, install it, and establish its persistence. Although MATCHBOIL was first documented by CERT-UA in August 2025, our research indicates that it has been in development since at l

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account For a YouTuber, the approach may look like routine business: a personalized sponsorship email from a global brand and a brief negotiation over rates, followed by an invitation to visit a slick collaboration platform. In some cases, however, the sequence can mask a scam that could part social media content creators from their Google accounts. One such recent campaign impersonates Hol

Let’s celebrate Cybersecurity Awareness Month with a deeper look at how humans treat their friendly neighborhood AI. AI chatbots are growing in popularity, and their availability is spreading fast. They’re everywhere, on your PC, phone, tablet, and even your IoT smart speaker. Good thing too, since they can be very useful, like for summarizing work docs, helping with math problems, creating complex graphics, and so on. This wouldn’t be possible without the AI knowing a lot of

The cybersecurity market is often making it tougher for SMBs to keep threats at bay Cybersecurity has never been easy. Threats evolve at breakneck speed. Corporate attack surfaces continue to expand with each new digital investment. Regulatory requirements add extra pressure on stretched teams. And behind it all, the unpredictability of human nature means there is no such thing as 100% security. But the market for security solutions doesn’t make things any easier for SMBs. Sm