ESET in the Media

ClickFix treibt neue Infostealer-Kampagnen an

<div clas

Mar 18, 2026

eSecurity Planet

Surfshark vs NordVPN (2026): Which VPN Wins? Full Breakdown

NordVPN or Surfshark? Compare speed, security, price, streaming, unique features, and more in our detailed 2026 VPN review. Find your match. The post Surfshark vs NordVPN (2026): Which VPN Wins? Full Breakdown app

Mar 17, 2026

Hackers targeted Poland’s National Centre for Nuclear Research

Hackers targeted Poland’s National Centre for Nuclear Research, but security systems detected and blocked the attack before any damage. The National Centre for Nuclear Research in Poland reported a cyberattack on its IT infrastructure. The intrusion attempt was quickly detected by security systems,

Beta News

ESET launches eCrime Reports to track ransomware and infostealer attacks

Security firm ESET has introduced a brand new addition to its Threat Intelligence portfolio called eCrime Reports, that could potentially give security teams far deeper insight into ransomware and infostealer activity. The reports provide detailed data on how attacks unfold, offering information tha

WebProNews

FBI Investigates Malware in Steam Games for Crypto Mining and Theft

The FBI is investigating malware hidden in Steam games, used for cryptocurrency mining and data theft by malicious developers exploiting the platform's open submission process. Valv

The Next WebTech Media

ESET PROTECT scored zero false alarms in independent testing. Now it’s 20% off.

Disclosure: This article contains affiliate links. If you click through and make a purchase, we may earn a commission at no additional cost to you. This helps support our cont

WebProNews

Microsoft’s March 2025 Patch Tuesday: 78 Vulnerabilities, Six Zero-Days, and Why You Should Act Now

Microsoft's March 2025 Patch Tuesday fixes 78 vulnerabilities including six actively exploited zero-days targeting NTFS, FAT file systems, Windows kernel, and Management Console. Se

Mar 12, 2026

New 'Zombie ZIP' technique lets malware slip past security tools

A new technique dubbed "Zombie ZIP" helps conceal payloads in compressed files specially created to avoid detection from security solutions such as antivirus and endpoint detection and response (EDR) products. [...]

Threat intelligence by ESET is a game changer

Cyber

The CSO role is evolving fast with AI in Cyber Defense strategy

AI an

Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit

After several years of using simple implants, the Russia-affiliated actor is back with two new sophisticated malware tools.

APT28 conducts long-term espionage on Ukrainian forces using custom malware

APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to co

CyberInsider

APT28 revives advanced malware toolkit used in cyber-espionage ops

Russia-linked threat actor APT28 has reactivated its advanced malware development team with a modern espionage toolkit that combines the BeardShell implant with a heavily customized version of the open-source Covenant framework. APT28, also known as Fancy Bear and linked to Russia’s GRU Unit 2616

APT28 hackers deploy customized variant of Covenant open-source tool

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. [...]

Tarnung als Taktik: Warum Ransomware-Angriffe raffinierter werden

<div clas

Mar 9, 2026

ZDNetTech Media

The best antivirus software to protect your computer in 2026

Looking for a new antivirus? My tried and tested favorites will improve the security of your desktop PC, laptop, and mobile devices.

Mar 7, 2026

CIO Dive

How Microsoft, partners are tackling ‘huge, huge task’ of making security software safer

The technology giant and third-party security vendors are plo

Mar 6, 2026

TechRadarTech Media

TfL admits 2024 cyberattack may have affected over 10 million people — personal customer info stolen, here's what we know so far

Around 10 million people thought to be affected in 2024 TfL cyberattack.

Mar 6, 2026

Cybersecurity Dive

How Microsoft, partners are tackling ‘huge, huge task’ of making security software safer

The technology giant and third-party security vendors are plo

Mar 2, 2026

February 2026

ZDNetTech Media

The best antivirus software 2026

Looking for a new antivirus? My tried and tested favorites will improve the security of your desktop PC, laptop, and mobile devices.

Feb 28, 2026

NYPost

CAPTCHA test scam hijacks victim’s data in the most ‘diabolical’ way — here’s how to spot a ‘ClickFix’ attack

It's a digital wolf in sheep's clothing.

Feb 27, 2026

GBHackers

Hackers Use Steganographic Images to Bypass Anti-Malware and Deploy Malware

Hackers are abusing steganography in PNG images to smuggle a Pulsar Remote Access Trojan (RAT) into Windows systems through a malicious NPM package named buildrunner‑dev. The attack starts with a typosquatted NPM package, buildrunner‑dev, which impersonates the abandoned “buildrunner”/“build-runn

Feb 24, 2026

EconomicTimes - IndiaTimes

Iran's MuddyWater Targets Orgs With Fresh Malware as Tensions Mount

The long-active Iranian threat group debuted various attack strains and payloads in attacks against organizations in the Middle East and Africa.

Feb 23, 2026

TechRadarTech Media

'The AI model and prompt are predefined in the code and cannot be changed': Experts say PromptSpy is the first known Android malware to use Gemini to ensure infection

PromptSpy Android malware uses Gemini AI and Accessibility Services to maintain persistence, record activity, and evade normal malware removal.

Feb 23, 2026

WebProNews

The Apps Already on Your Phone That Security Experts Say You Should Delete Immediately

Security researchers warn that many of the most popular Android apps — from free antivirus tools to weather and flashlight apps — engage in excessive data collection and pose real p

Feb 23, 2026

World looks more complex outside echo chambers of AI: ESET global CEO

Describing India as "probably the fastest major economy in the world," he pointed to its strong universities and steady pipeline of engineers as key strategic advantages. ESET is expanding its presence in the country and is considering the possibility of setting up a research and development centre

Feb 21, 2026

Android Authority

Android malware is now using Google’s own Gemini AI to adapt in real time

Android threats may have just entered a new AI phase.

How To Geek

New Android malware uses Gemini AI to learn how to run on specific devices

PromptSpy takes the guesswork out of Android device differences.

Infosecurity Magazine

Android Malware Hijacks Google Gemini to Stay Hidden

A new Android malware implant using Google Gemini to perform persistence tasks was discovered on VirusTotal and analyzed by ESET

PromptSpy abuses Gemini AI to gain persistent access on Android

PromptSpy is the first Android malware to abuse Google’s Gemini AI, enabling persistence and advanced spying features. Security researchers at ESET have uncovered PromptSpy, the first known Android malware to exploit Google’s Gemini AI to maintain persistence. The malware can capture lockscreen data

SecurityWeek

PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence

The malware leverages Gemini to analyze on-screen elements and ensure that it remains on the device even after a reboot. The post PromptSpy Android Malware Abuses Gemini AI at Runt

GBHackers

PromptSpy: First Android AI Malware Leverages Google’s Gemini for Decision-Making

PromptSpy is a newly discovered Android malware family that abuses Google’s Gemini generative AI model to make real‑time decisions on how to manipulate the user interface and stay active on infected devices. PromptSpy’s AI‑assisted functionality is focused on persistence rather than initial infec

Nerds.xyz

Android’s AI nightmare begins as malware turns Gemini into a hacking tool

<img alt="Android AI malware" class="webfeedsFeaturedVisual wp-post-image" height="600" src="https://nerds.xyz/wp-content/uploads/

PromptSpy is the first known Android malware to use generative AI at runtime

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its persistence across different devices. [...]

PromptSpy is the first Android malware to use generative AI at runtime

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its persistence across different devices. [...]

CyberInsider

PromptSpy Android malware abuses Google Gemini AI for persistence

ESET researchers have uncovered the first known Android malware to incorporate generative AI directly into its execution flow. The malware, named PromptSpy, abuses Google’s Gemini model to dynamically manipulate the Android user interface and ensure its own persistence on infected devices. ESET r

PCMagTech Media

This Android Malware Connects to Google Gemini for Tips on Hacking Targets

'PromptSpy' appears to be the first Android malware that uses generative AI in its execution flow, according to antivirus provider ESET.

The Register AI-ML

Android malware taps Gemini to navigate infected devices

The real deal or another research project overblown? Cybersecurity researchers say they've spotted the first Android malware strain that uses generative AI to improve performance once installed. But it may be only a proof of concept.…

TechRadarTech Media

We all need digital protection and the ESET Home Security Plan is the bees knees

Save an unbelievable 50% on the ESET Home Security Ultimate plan.

ForbesMajor Publication

iOS 26.4—Apple Switches Key iPhone Feature On By Default

Apple's iOS 26.4 sees its Stolen Device Protection anti-theft feature turned on by default. Here's what you need to know.

Feb 17, 2026

Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks

Threat actors are exploiting security gaps to weaponize Windows drivers and terminate security processes in targeted networks, and there may be no easy fixes in sight.

Feb 13, 2026

Nation-State Hackers Put Defense Industrial Base Under Siege

Espionage groups from China, Russia and other nations burned at least two dozen zero-days in edge devices in attempts to infiltrate defense contractors’ networks.

Feb 13, 2026

ForbesMajor Publication

iOS 26.3—Update Now Warning Issued To All iPhone Users

Apple has released iOS 26.3 fixing 39 security flaws — one of which is already being used in real-life attacks. Here's what you need to know.

Feb 13, 2026

ForbesMajor Publication

iOS 26.3—Update Now Warning Issued To All iPhone Users

Apple has released iOS 26.3 fixing 39 security flaws — one of which is already being used in real-life attacks. Here's what you need to know.

Feb 12, 2026