Hello.

Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. SMB cybersecurity isn’t always given the attention it deserves, including by small businesses themselves. That’s concerning for various reasons, notably because the companies comprise 90% of the world’s businesses, 70% of its employees, and 50% of global GDP, according to the World Economic Forum (WEF). With fewer resources to spend on cybersecurity, funds must be al

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights. A year ago, ESET Research was part of two major operations that disrupted some of the leading cybercriminal operations at the time, Lumma Stealer and Danabot. More recently, our researchers are once again collaborating with private partners and law enforcement, but this time taking aim at the Amade

Global cybersecurity leader ESET, in partnership with MTN Nigeria, has reaffirmed its commitment to protecting Nigerians against the growing wave of cyber threats with the reintroduction of ESET Internet Security and ESET PROTECT Entry, now available through convenient and affordable subscription plans on the MTN network. As cybercrime continues to evolve, individuals, families and small businesses are increasingly exposed to ransomware attacks, phishing scams, identity theft

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning of 2026, Gentlemen has emerged as one of the most active gangs in the ransomware ecosystem. The group distinguishes itself through a mature, operator-maintained set of endpoint detection and response (EDR) killers, i.e., too

The contemporary smartphone is no longer a mere communication utility. It has evolved into a primary financial terminal, our decentralized workplace, and the literal repository of digital identities. These devices are carried with an intimacy we accord no other technology, treating them as trusted extensions of our daily lives. There was a time when cybersecurity was primarily an organizational concern. It belonged to IT departments, security teams, and large enterprises ta

Digital transformation is reshaping how governments deliver services to citizens. As operations move to the cloud, automated portals, and interconnected networks, public service efficiency reaches unprecedented heights. However, this shift expands the digital attack surface. To support this evolving reality, ESET Nigeria recently concluded a comprehensive Cybersecurity Capacity Building and Optimization Programme for staff of Lagos State Government Ministries, Departments, an

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks. In a manufacturing plant built around uptime, a machine that has run the same physical process for years with barely a hiccup earns something less commonly discussed than a track record of throughput: institutional trust. Over time, such quiet reliability has a way of making a certain kind of scrutiny feel unnecessary, to the point that t

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness ESET researchers have discovered two as-yet undocumented Windows variants of SprySOCKS, a previously Linux-only backdoor reportedly used by FishMonger, the group believed to be operated by a Chinese contractor named I‑SOON. While we initially discovered the malware samples on VirusTotal, ESET telemetry shows real activity between 2023 and 2024, w

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages Much has been written about how the days of phishing emails laden with broken grammar and crude design are numbered, largely thanks to AI. Meanwhile, EvilTokens offers a somewhat different example of how far the phishing craft has moved. EvilTokens is a phishing-as-a-service (PhaaS) kit built to compromise Microsoft 36

A shift in operational pattern of the infamous Vietnam-aligned APT group Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations while placing increasing emphasis on domestic espionage. We identified two distinct campaigns involving the SPECTRALVIPER backdoor: a supply-chain attack targeting stock investors in Vietnam and a prolonged e