ESET researchers discovered two previously unknown vulnerabilities, one in Mozilla and the other in Windows, being exploited by the Russia-aligned RomCom Advanced persistent threat (APT) group
ESET researchers have identified multiple samples of the Linux backdoor WolfsBane and attribute it with high confidence to Gelsemium, a China-aligned APT group.
Following the takedown of RedLine Stealer by international authorities, ESET researchers are publicly releasing their research into this infostealer’s undocumented backend modules.
This ESET APT Activity Report summarizes notable activities of cyberthreat groups that were documented by ESET researchers from April 2024 until the end of September 2024.