Skip to content

ESET Research: The EDR Killer Ecosystem 2026

ESET Research has unveiled a massive shift in ransomware tactics. Attackers are increasingly using EDR Killers—specialized tools designed to blind security software—as a prerequisite for successful data encryption.

Strategic Division of Labor Affiliates pick the tools, while operators provide the encryptors. More affiliates mean more diverse and unpredictable attack methods.
The AI Influence Recent codebases, specifically from the Warlock gang, show markers of AI-assisted generation, including “trial-and-error” logic.
Driverless Neutralization BYOVD is common, but attackers now abuse legitimate anti-rootkit utilities and admin commands to suspend protection without touching the kernel.
 

The Defensive Reality

Protecting against modern ransomware requires a mindset shift. Unlike automated threats, ransomware is a human-driven operation. When a tool fails or a driver is blocked, the attacker is there in real-time to pivot to a new method.

“While preventing vulnerable drivers from loading is a crucial step, it is not a silver bullet. Defenders must aim to disrupt EDR killers before they establish a kernel-level foothold.”

For the full technical analysis, visit WeLiveSecurity.com and search for the 2026 EDR Killer Ecosystem report.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET Endpoint Security v12 CC Certification

ESET, a global cybersecurity leader, has been named to the 11th annual CRN® Security 100 list. The company was specifically highlighted as one of the “20 Coolest Endpoint and Managed Security Companies of 2026” for its continuous innovation within the ESET PROTECT portfolio. These advancements assist channel partners in expanding services, maintaining regulatory compliance, and meeting cyber insurance demands.

Empowering the Channel with Advanced Security

CRN’s Security 100 list recognizes vendors that work closely with channel partners to deliver mission-critical, next-generation security solutions. Jennifer Follett, Vice President at CRN, noted that these vendors “continue to evolve their portfolios to stay ahead of adversaries and emerging threats.”

Scalable MDR and AI-Driven Automation

In 2025, ESET enhanced its ESET PROTECT MDR for MSPs to help providers manage cybersecurity complexity and industry fatigue. Key features of the service include:

  • Rapid Response: Boasts an average detection and response time of just six minutes.
  • Hybrid Intelligence: Integrates AI-powered automation with expert human threat hunting and global threat intelligence.
  • Comprehensive Monitoring: Provides 24/7 monitoring with integrated protection for endpoints, email, and cloud environments through a unified platform.

 

A 5-Star Partner Experience

In addition to the Security 100 recognition, ESET earned a 5-Star rating in the 2026 CRN Partner Program Guide. This rating reflects the maturity of the ESET Partner Connect Program, which offers:

  • Profitable Growth: Features stackable margins, incumbency protection, and a flexible tiered structure.
  • Extensive Support: Provides partners with comprehensive training, certifications, and robust sales and marketing resources.
  • Technical Edge: Equips partners with insights from ESET’s global R&D network to strengthen customer security and drive long-term success.

“Being recognized on the 2026 Security 100 list — and earning a 5-Star Partner Program rating — validates our strategy of pairing cutting-edge, AI-native security solutions with a flexible, profitable program,” said Ryan Grant, Country Manager, U.S. and Canada at ESET.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET Honored on CRN 2026 Security 100 List

ESET, a global cybersecurity leader, has been named to the 11th annual CRN® Security 100 list. The company was specifically highlighted as one of the “20 Coolest Endpoint and Managed Security Companies of 2026” for its continuous innovation within the ESET PROTECT portfolio. These advancements assist channel partners in expanding services, maintaining regulatory compliance, and meeting cyber insurance demands.

Empowering the Channel with Advanced Security

CRN’s Security 100 list recognizes vendors that work closely with channel partners to deliver mission-critical, next-generation security solutions. Jennifer Follett, Vice President at CRN, noted that these vendors “continue to evolve their portfolios to stay ahead of adversaries and emerging threats.”

Scalable MDR and AI-Driven Automation

In 2025, ESET enhanced its ESET PROTECT MDR for MSPs to help providers manage cybersecurity complexity and industry fatigue. Key features of the service include:

  • Rapid Response: Boasts an average detection and response time of just six minutes.
  • Hybrid Intelligence: Integrates AI-powered automation with expert human threat hunting and global threat intelligence.
  • Comprehensive Monitoring: Provides 24/7 monitoring with integrated protection for endpoints, email, and cloud environments through a unified platform.

 

A 5-Star Partner Experience

In addition to the Security 100 recognition, ESET earned a 5-Star rating in the 2026 CRN Partner Program Guide. This rating reflects the maturity of the ESET Partner Connect Program, which offers:

  • Profitable Growth: Features stackable margins, incumbency protection, and a flexible tiered structure.
  • Extensive Support: Provides partners with comprehensive training, certifications, and robust sales and marketing resources.
  • Technical Edge: Equips partners with insights from ESET’s global R&D network to strengthen customer security and drive long-term success.

“Being recognized on the 2026 Security 100 list — and earning a 5-Star Partner Program rating — validates our strategy of pairing cutting-edge, AI-native security solutions with a flexible, profitable program,” said Ryan Grant, Country Manager, U.S. and Canada at ESET.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET Uncovers “PromptSpy” – The Era of AI-Driven Android Threats

ESET researchers have discovered PromptSpy, the first known Android threat to utilize generative AI (Google Gemini) within its execution flow. By prompting an AI model to interpret UI elements, the malware achieves a level of adaptability previously unseen in mobile threats.

Technical Breakthrough: PromptSpy uses Gemini to receive dynamic instructions on how to “lock” itself in the recent apps list, ensuring the malicious process remains active and cannot be easily closed by the user.
 

Key Capabilities

Remote VNC Access
Lockscreen Data Theft
Invisible UI Overlays
Screen Activity Recording
AES-Encrypted C&C
Anti-Uninstallation Logic
 

Distribution and Targeting

The malware currently targets users in Argentina by impersonating the Morgan Chase bank (using the name MorganArg). It is distributed through malicious third-party websites and is not present on the official Google Play Store.

Critical Removal Procedure

Because PromptSpy uses invisible overlays to block uninstallation, users must follow these steps:

  1. Reboot into Safe Mode: Typically by long-pressing the “Power Off” option in the power menu.
  2. Navigate to Settings: Go to Settings → Apps.
  3. Uninstall: Locate “MorganArg” and select Uninstall.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET Finalist: Cybersecurity Community Awards 2026

ESET, a global leader in cybersecurity, has been recognized by the Expert Insights Cybersecurity Community Awards 2026 as a finalist in the prestigious “Best Security Company” category.

Industry Leadership: Finalists were selected based on nominations from global IT professionals and independent research, emphasizing real-world impact over “pay-to-play” marketing.
 

A Legacy of Advanced Protection

Driven by the same engineers who founded the company over 30 years ago, ESET protects millions of users through an AI-native security portfolio. Key offerings include:

  • XDR & MDR: Next-generation prevention and response.
  • APT Tracking: Specialized research teams monitoring sophisticated threat groups.
  • Global Footprint: Trusted by critical industries and governments in 178 territories.
“A single layer of defense is not enough in today’s evolving landscape. This recognition reflects the trust our customers place in us and our dedication to intelligence-driven security.”
— Ryan Grant, Country Manager, ESET U.S. and Canada
 

Cast Your Vote

Support the cybersecurity innovators making a global difference. Community voting remains open until February 20, 2026.

 

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

×

Hello!

Click one of our contacts below to chat on WhatsApp

Social Chat is free, download and try it now here!

×