Tag Archives: cyberespionage

ESET Uncovers PlushDaemon’s Global Cyberespionage Operation Using EdgeStepper to Hijack Software-Update Traffic

(IN BRIEF) ESET researchers have revealed that the China-aligned cyberespionage group PlushDaemon has been deploying adversary-in-the-middle attacks through a newly identified network-device implant called EdgeStepper, which manipulates DNS traffic to divert legitimate software-update requests to attacker-controlled servers. This redirection enables … Read the full press release

ESET Warns of Zero-Day in WinRAR Exploited by RomCom, Urges Immediate Update

(IN BRIEF) ESET has discovered CVE-2025-8088, a zero-day path traversal vulnerability in WinRAR exploited by the Russia-aligned RomCom group in targeted spearphishing campaigns against organizations in Europe and Canada. The flaw, patched on July 30, 2025, was used to deliver … Read the full press release

Thales Warns of Sixfold Surge in Ransomware Strikes on Aviation Ahead of Paris Air Show

(IN BRIEF) Thales’s latest report, released just before the Paris Air Show, documents a 600% rise in ransomware attacks on the aviation industry between January 2024 and April 2025. Analysts recorded 27 major incidents by 22 ransomware groups, with 71% … Read the full press release

ESET’s Latest Discovery Sheds Light on Ballistic Bobcat’s Persistent Cyberespionage Efforts

(IN BRIEF) ESET researchers have uncovered a cyberespionage campaign led by the Ballistic Bobcat group, suspected of having Iranian ties, which primarily targets education, government, healthcare, and various organizations worldwide. In their latest campaign, they introduced a new backdoor called … Read the full press release