NSPX30's installer component ⬇️

Met the one and only Lena at #JSAC2024 and she came bearing gifts 😄

I'm glad that so many colleagues have found this research interesting, and I even got to shake hands with Franki Li who authored the 1st report on PWood in 2011.

Grateful to Marc-Etienne M.Léveillé, Anh, and our master detection engineer who helped me with research! 🙌🏻

Today I will be presenting our #Blackwood (and a bit more) research at #jsac2024 , if you see me around come say hello!

I'm happy to announce I will be presenting at #JSAC2024 our latest work at ESET research, titled:

NSPX30: a sophisticated AitM-enabled implant evolving since 2005

You can read more about it here: jsac.jpcert.or.jp/timetable.html

#ESETResearch discovered a previously unknown #Belarus -aligned cyberespionage group that we named #MoustachedBouncer . Active since 2014, they are spying on EU, African and Asian diplomats stationed in 🇧🇾 🇧🇾 1/5 welivesecurity.com/en/eset-resear…

🚨🚨➡️ NEW REPORT OUT > Imagine if someone read everything you type online. Our new report- 
“Please do not make it public”, analyzes Tencent's #Sogou Input Method, the most popular input app in #China has serious vulnerabilities in the encryption system.
citizenlab.ca/?p=79791&previ…

#ESETresearch will present at Black Hat USA 2023. On August 10th, __mat__ will talk about #MoustachedBouncer : AitM-Powered Surveillance via Belarus ISPs 🇧🇾 #BHUSA #BlackHat Stay tuned!

Our research on Tick APT group is out! 👇

The exploit for Safari is quite complex and massive. I really wanted to understand exactly what the vulnerability was and how it was mitigated, so I dived into the world of browser exploits for a few days and tried to explain how leaking object addresses was possible.

This is probably the most interesting threat intelligence research I've read all year.

i would like to salute all researchers over the years that discovered, anayzed and published top notch research on which we based our paper, you all rock! working with the one, Alexis Dorais-Joncas (@[email protected]), was my honour and a great learning experience, cheers to a great end of year

#ESETResearch unveils a large watering hole campaign targeting 20+ high-profile websites linked to the Middle East. We link that campaign to a likely customer of Candiru, a private spyware firm recently added to the U.S. Commerce Dept. Entity List. welivesecurity.com/2021/11/16/str… 1/4

Be careful if you download IDA Pro from non-official sources - it can be trojanized by #Lazarus