ESET researchers discovered two previously unknown vulnerabilities, one in Mozilla and the other in Windows, being exploited by the Russia-aligned RomCom Advanced persistent threat (APT) group
ESET researchers have identified multiple samples of the Linux backdoor WolfsBane and attribute it with high confidence to Gelsemium, a China-aligned APT group.
Following the takedown of RedLine Stealer by international authorities, ESET researchers are publicly releasing their research into this infostealer’s undocumented backend modules.