Bratislava, June 23rd, 2022 – ESET, a global leader in digital security, has been awarded Leader status in G2’s report for summer 2022. The ESET PROTECT Advanced solution has consistently been highly ranked by G2 users and achieved substantial satisfaction and market presence scores in their Grid® Reports, which represent the democratic voice of real software users, offering benchmarks for product comparison and market trend analysis.

In the summer edition of the G2 Grid® Reports, ESET was a Leader in several of the reports, including for Antivirus Software, Endpoint Management Software, Endpoint Protection Suites, and Mobile Data Security Software. And in terms of the Mid-Market reports aimed at companies with up to 1,000 employees, ESET was a Leader in Mid-Market Endpoint Protection Suites, Mid-Market Antivirus Software, and Mid-Market Endpoint Management Software.

“We are delighted to be ranked as Leaders in the G2 reports. Our objective is to provide the digital security that keeps an organization’s systems working smoothly and securely, and being recognized for our efforts is always an honor,” comments Michal Jankech, VP for the SMB and MSP segment at ESET. “No modern business, large or small, can survive without an effective response in the face of an IT breach. We believe, that by employing ESET´s strong prevention, detection and response technologies delivered in the form our modular ESET PROTECT platform, businesses can benefit from the most densely multilayered and effective protection in the industry.”

For more than 30 years, ESET has continued to invest heavily in multiple layers of proprietary technology that prevent breaches of its customers’ endpoints and systems, by both known and never-before-seen threats. The ESET PROTECT platform has been designed with ESET’s customers in mind, with the main objective being in assisting IT admins to better manage the security risks in their environments.

As a privately owned, tech-focused company, ESET has always taken a science-based, security-first approach, with early adoption of machine learning and cloud computing power to develop its global threat intelligence systems. The company has continuously been named a top player and a leader in the industry for its business solutions.

• The number of RDP attacks dropped for the first time since the beginning of 2020 (-43%), with attack attempts against SQL (-64%) and SMB (-26%) following.
• Prior to the invasion of Ukraine, Russia and some countries of the Commonwealth of Independent States (CIS) were typically excluded from ransomware target lists, possibly due to the criminals residing in those countries or fearing retribution; in T1 2022, Russia faced the largest share of detections (12%) in the Ransomware category.
• The war brought on an influx of phishing and scam campaigns taking advantage of people trying to support Ukraine; these were detected almost immediately after the start of the invasion.
• In March and April 2022, Emotet operators shifted into a higher gear, launching massive spam campaigns using weaponized Microsoft Word documents, leading to the 113-fold increase of Emotet detections in T1 2022.
• Emotet’s campaigns were reflected in the Email threats category, which grew by 37% in T1 2022.

BRATISLAVA — June 2, 2022 — ESET released today its T1 2022 Threat Report, summarizing key statistics from ESET detection systems and highlighting notable examples of ESET’s cybersecurity research. The latest issue of the ESET Threat Report recounts the various cyberattacks connected to the ongoing war in Ukraine that ESET researchers analyzed or helped to mitigate. This includes the resurrection of the infamous Industroyer malware, attempting to target high-voltage electrical substations.

ESET telemetry also recorded other changes in the cyberthreat realm that might have a connection to the situation in Ukraine. Roman Kováč, Chief Research Officer at ESET, clarifies why this report is so focused on cyberthreats related to this war: “Several conflicts are raging in different parts of the world, but for us, this one is different. Right across Slovakia’s eastern borders, where ESET has its HQ and several offices, Ukrainians are fighting for their lives and sovereignty.”

Shortly before the Russian invasion, ESET telemetry recorded a sharp drop in Remote Desktop Protocol (RDP) attacks. The decline in these attacks comes after two years of constant growth – and as explained in the Exploits section of the latest ESET Threat Report, this turn of events might be related to the war in Ukraine. But even with this fall, almost 60% of incoming RDP attacks seen in T1 2022 originated in Russia.

Another side effect of the war: While in the past, ransomware threats tended to avoid targets located in Russia, during this period, according to ESET telemetry, Russia was the most targeted country. ESET researchers even detected lock-screen variants using the Ukrainian national salute “Slava Ukraini!” (Glory to Ukraine!). Since the Russian invasion of Ukraine, there has been an increase in the number of amateurish ransomware and wipers. Their authors often pledge support for one of the fighting sides and position the attacks as personal vendettas.

Unsurprisingly, the war has also been noticeably exploited by spam and phishing threats. Immediately after the invasion on February 24, scammers started to take advantage of people trying to support Ukraine, using fictitious charities and fundraisers as lures. On that day, ESET telemetry detected a large spike in spam detections.

ESET telemetry has also seen many other threats unrelated to the Russia/Ukraine war. “We can confirm that Emotet – the infamous malware, spread primarily through spam email – is back after last year’s takedown attempts, and has shot back up in our telemetry,” explains Kováč. Emotet operators spewed spam campaign after spam campaign in T1, with Emotet detections growing by more than a hundredfold. However, as the Threat Report notes, the campaigns relying on malicious macros might well have been the last, given Microsoft’s recent move to disable macros from the internet by default in Office programs. Following the change, Emotet operators started testing other compromise vectors on much smaller samples of victims.

The ESET T1 2022 Threat Report also reviews the most important research findings, with ESET Research uncovering: the abuse of kernel driver vulnerabilities; high‑impact UEFI vulnerabilities; cryptocurrency malware targeting Android and iOS devices; a yet-unattributed campaign deploying the DazzleSpy macOS malware; and the campaigns of Mustang Panda, Donot Team, Winnti Group, and the TA410 APT group.

The report also contains an overview of the numerous talks given by ESET researchers in T1 2022, and introduces talks planned for the RSA and REcon conferences in June 2022, showcasing ESET Research’s discovery of Wslink and ESPecter. These appearances will be followed by a talk at the Virus Bulletin Conference in September 2022.

For more information, check out ESET T1 2022 Threat Report on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.