BRATISLAVA – ESET, a global leader in cybersecurity, has again been commended with the highest score in the latest AV-TEST for best antivirus software for Android. After launching version 6.0 of ESET Mobile Security (EMS) in September with the new Payment Protection feature, ESET earned top scores for the second time in a row with a total of 18 points.

AV-TEST, a leading independent testing organization, uses one of the largest collections of digital malware samples in the world to create a real-world environment for highly accurate in-house testing.

After achieving the top score in the July 2020 AV-TEST, ESET was evaluated alongside 14 other mobile security products, using their default settings and the most current version of all products. The testing focused on malware detection and usability, including performance and false positives. ESET Mobile Security achieved the highest score of 99.8% in “Protection against the latest Android malware attacks in real time” and a perfect 100% in “Detection of widespread Android malware discovered in the last 4 weeks.” The ESET Mobile Security app for Android was also highlighted for not impacting battery life or slowing down the device.

Version 6.0 of the premium Mobile Security solution introduces a new layer of security for EMS users. The Payment Protection feature safeguards users while utilizing financially related applications, for example, for banking or trading. This feature automatically categorizes all installed applications from the Google Play store that fall into the Finance category and scans them for potential threats. The user is also able to add other installed apps to the list that may fall outside of the Finance category.

Commenting on the results, Branislav Orlík, product manager at ESET, said, “We are extremely proud of ESET’s consistent recognition from AV-TEST for our mobile security product offering. Our dedication to providing customers with the very best in IT security solutions is reflected in these scores, as it is vital that users’ personal and professional data is protected to the highest standard. We are thrilled to have achieved the highest score once again and are committed to always innovating and updating our product offerings.”

Click here to find out more information about ESET Mobile Security.

BRATISLAVA – ESET researchers recently discovered attempts to deploy Lazarus malware via a supply-chain attack (on less secure parts of the supply network) in South Korea. In order to deliver its malware, the attackers used an unusual supply-chain mechanism, abusing legitimate South Korean security software and digital certificates stolen from two different companies. The attack was made easier for Lazarus since South Korean internet users are often asked to install additional security software when visiting government or internet banking websites.

“To understand this novel supply-chain attack, you should be aware that WIZVERA VeraPort, referred to as an integration installation program, is a South Korean application that helps manage such additional security software. When WIZVERA VeraPort is installed, users receive and install all necessary software required by a specific website. Minimal user interaction is required to start such software installation,” explains Anton Cherepanov, ESET researcher who led the investigation into the attack. “Usually this software is used by government and banking websites in South Korea. For some of these websites it’s mandatory to have WIZVERA VeraPort installed,” adds Cherepanov.

Additionally, the attackers used illegally obtained code-signing certificates in order to sign the malware samples. Interestingly, one of these certificates was issued to the U.S. branch of a South Korean security company. “The attackers camouflaged the Lazarus malware samples as legitimate software. These samples have similar file names, icons and resources as legitimate South Korean software,” says Peter Kálnai, ESET researcher who analyzed the Lazarus attack with Cherepanov. “It’s the combination of compromised websites with WIZVERA VeraPort support and specific VeraPort configuration options that allows attackers to perform this attack,” adds Kálnai.

ESET Research has strong indications to attribute the attack to Lazarus, as it is a continuation of what KrCERT has called Operation BookCodes, attributed to Lazarus by some in the cybersecurity research community. The other reasons are typical toolset characteristics; detection (many tools are already flagged as NukeSped by ESET); the fact that the attack took place in South Korea, where Lazarus is known to operate; the unusual and custom nature of the intrusion and encryption methods used; and the setup of network infrastructure.

It must be noted that the Lazarus toolset is extremely broad, and ESET believes there are numerous subgroups. Unlike toolsets used by some other cybercriminal groups, none of the source code of any Lazarus tools has ever been disclosed in a public leak.

For more technical details about the latest Lazarus supply-chain attack, read the blogpost “Lazarus supply-chain attack in South Korea” on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

Bratislava – Every year, the Pontis Foundation awards the Via Bona award for exceptional projects and socially responsible companies that change Slovakia for the better. In the 20th anniversary of this award, ESET managed to win in two categories: Responsible Large Company and Good Partner of the Community.

The Via Bona Slovakia award has been given by the Pontis Foundation since 1998 to small and large companies that inspire other companies with their activities. The winners of this prestigious award are companies that change life in Slovakia for the better with their projects and responsible approaches to business. The award in the main category Responsible Large Company for 2019 was acquired by ESET mainly for demonstrating long-term ethical values ​​in our business model and contributing to the popularization of science and research in Slovakia.

“ESET is often cited as an example of a success story of a Slovak company that established itself abroad. We are aware of the responsibility that comes with that, especially at home in Slovakia. We do not choose an easier path. We support areas that have been neglected or overlooked for a long time. At the same time, we strive to be a voice that can be heard when needed. When, as a country, we are going through difficult times, it is desirable that the representatives of companies express themselves and stand out as voices of reason. And I hope that we have people, companies and organizations in Slovakia who really care about the success and fate of Slovakia,” responded ESET CEO Richard Marko in his thank-you speech for the award.

ESET also became the winner of the Good Partner of the Community category for our investment in the popularization and development of Slovak science. Supporting education, science and research are areas that ESET has long been involved in. It is these areas that help Slovakia become a modern and successful country. Therefore, through the ESET Foundation, it created the ESET Science Award, which aims to increase the social status of science and scientists in Slovakia. In October 2020, the second year of the ESET Science Award took place with the participation of the world-famous physicist and Nobel Prize winner, Professor Kip Thorne, who was chairman of a prestigious international commission.

“I thank both the expert jury and the employees of ESET, who are the main reason for our success. It is especially thanks to them that we can celebrate this award. I would also like to wish Slovakia success, because I think it has a positive future ahead of it,” concluded Richard Marko.