New movements by the cybercriminal group “FamousSparrow,” an APT (prolonged and stealthy cyberattack) where an intruder gains access to a network and remains hidden for a period of time to steal data or spy, have been revealed, reported ESET, a leading company in proactive threat detection. This time, ESET discovered that the group has deployed a new backdoor — hidden code in a program or system that allows unauthorized access and bypasses security — targeting several Latin American countries, at least since August 2025.

“We believe this geographic focus is not accidental and likely reflects China’s response to various recent US initiatives in the region. In fact, Donald Trump’s second presidential term has seen an aggressive reassertion of US interests in Latin America, which puts several strategic investments that China has developed on the continent over the last decade in sectors such as energy, mining, and telecommunications at risk. We suspect that FamousSparrow’s activities aim to help China better monitor and anticipate the reactions of local governments to current US pressure,” commented the ESET research team.

FamousSparrow is a Chinese-linked cyberespionage group believed to have been active since at least 2019. Initially known for targeting hotels worldwide, it has also targeted governments, international organizations, trade associations, engineering firms, and law firms.

Currently, the group appears to be focusing on high-profile targets in Latin America. This trend reportedly began in July 2025 and has continued with the arrival of a new backdoor dubbed SparroWocky by ESET. In fact, between mid-2025 and 2026, 90% of the group’s targets recorded in ESET telemetry were located in the region.

Prolonged and stealthy cyberattack

ESET observed the deployment of the new backdoor against government entities in Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico, and Venezuela. This is an unusual case among the Chinese-linked APT groups that the research team had been monitoring, as their operations were typically spread across different regions of the world over extended periods.

While ESET states that it is still unclear whether the group’s apparent focus on Latin America is due to a formal geographic mandate or a temporary priority driven by current geopolitical circumstances, some cases seem to support the latter hypothesis. For example, one of the Panamanian entities identified by ESET as a target is directly involved in the trade dispute surrounding two major ports in the canal area, which until recently were operated by a Chinese-based company.

Given that the concession granted to that company was legally questioned by the Panamanian government at the beginning of 2025, ESET comments that it could be likely that the FamousSparrowgroup operation sought to obtain advance and privileged information about the intentions of local authorities regarding this matter.

Regarding the novelty of this discovery by ESET is the identification of SparroWocky, a new custom backdoor developed in C++, which incorporates more sophisticated evasion techniques to go unnoticed. This backdoor with extensive capabilities manipulates low-level structures in memory and modifies code at runtime to evade detection.

Additionally, it has the ability to load and run Beacon Object Files (BOF), a special type of executable file supported by numerous network teaming and penetration testing tools. The backdoor allows FamousSparrow to have the development capabilities necessary to integrate code from open source projects directly into its own custom backdoor.

ESET invites you to learn more about computer security and this finding by visiting: https://www.welivesecurity.com/es/investigaciones/famoussparrow-america-latina-sparrowocky/.

To obtain other useful preventive data, it is also available in Venezuela: https://www.eset.com/ve/, and its social networks @eset_ve. Also Instagram (@esetla) and Facebook (ESET).

With information and reference images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Cyberespionage group linked to China focuses operations on Latin America apareció primero en Bitfinance.

An IP address is a set of numbers that identifies a device connected to the internet and functions as a digital address, similar to a postal code for a residential address, pinpointing exactly where information should be delivered.

Although essential for the functioning of the internet, ESET, a leading company in proactive threat detection, warns that IP addresses also contain information that can be used against users themselves. The approximate location, internet service provider, and, in some cases, even usage patterns become visible to those who know where to look.

Understanding what an IP address is, how it works, and how to protect it is the first step to browsing more securely

The acronym IP stands for Internet Protocol, the set of rules that enables communication between devices on a network. Every computer, cell phone, router, or any other internet-connected device receives an IP address. Thanks to this address, websites, applications, and services know exactly where to send the requested information, whether it’s to open a page, watch a video, or send a message.

Not all IP addresses work the same way. There are different classifications, and understanding them helps you understand the risks involved:

• A public IP address is the address that identifies your connection to the rest of the internet. Your internet service provider assigns it, and it’s the number that any website or service sees when you access the network. It’s like your house address seen from the outside—what the outside world sees.
• A private IP address, on the other hand, operates within your own network, usually your home network. Each device connected to the router, whether a computer, cell phone, or Smart TV, receives a different private IP address so the router can distinguish one device from another. This address is not visible from outside the network.

“Having an exposed IP address doesn’t mean you’ll automatically be attacked, but it does mean there’s a vulnerability that can be exploited if proper precautions aren’t taken. Cybercriminals use IP addresses in various ways to plan or execute attacks,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

Threats and risks

One of the most common uses is location tracking. From a public IP address, it’s possible to determine the city and, sometimes, even the approximate region from which someone is connecting, as well as the internet service provider. This information alone isn’t enough to pinpoint a person’s location, but combined with other information, such as leaked data from a service, it can help a scammer create a more complete profile of the victim.

Another risk is the distributed denial-of-service (DDoS) attack, in which cybercriminals use a network of infected devices to send a massive volume of requests against a specific IP address, overloading the server until it crashes. The scale of these attacks can be alarming. In 2018, GitHub, for example, was briefly taken offline after suffering what was then the largest recorded DDoS attack, with a peak of 1.35 terabits per second of malicious traffic directed at the platform.

There is also IP spoofing, a technique by which a cybercriminal falsifies the source IP address of a communication, making it appear as if the traffic originates from a trusted source. This technique is used to bypass security systems, conceal the true origin of an attack, or deceive networks that rely on certain known IP addresses, and it is precisely the mechanism behind many of the largest DDoS attacks.

Finally, an exposed IP address can be used as a starting point for direct intrusion attempts, especially if the device connected to that address has open ports or unpatched vulnerabilities. In these cases, the cybercriminal analyzes the IP address for specific vulnerabilities that can be exploited.

Preventive tips

“Protecting an IP address doesn’t mean hiding it completely from the internet—something practically impossible if you want to browse normally—but rather making it harder for it to be used against you,” Micucci points out.

The most effective tool for protecting an IP address is a VPN, short for Virtual Private Network. When using a VPN, the connection passes through an intermediary server before reaching the final destination, which means that websites and services see the VPN server’s IP address and not your real IP address. This makes it harder to track your location and adds an extra layer of privacy, especially useful on public Wi-Fi networks, such as those in airports and cafes, where the risk of data interception is higher.

Another important measure is to keep your router and internet-connected devices always up to date. Vulnerabilities in routers are one of the main entry points for attacks, and manufacturers release updates precisely to fix these vulnerabilities. Changing the router’s default password to a strong one, disabling remote access when not needed, and closing unused ports also reduces the attack surface.

A well-configured firewall, whether built into your router or part of a security solution, helps block suspicious connection attempts before they reach your devices. It acts as a filter between your network and the internet, analyzing traffic and blocking anything that appears malicious.

Finally, it’s important to be careful with the information you share publicly. Live streams, online games, and even certain applications can expose your IP address if they aren’t configured correctly. Reviewing the privacy settings of these platforms and avoiding sharing unnecessary data is a simple way to reduce risks.

To learn more about ESET and various cybersecurity topics, you can visit: https://www.eset.com/latam/blog/cultura-y-seguridad-digital/que-es-direccion-ip-como-fucniona/

You can also find other useful preventative information in Venezuela at: https://www.eset.com/ve/, and on their social media: Instagram (@eset_ve) and X (@eset_ve)

You can also find them on Instagram (@esetla) and Facebook (ESET)

Information and image courtesy of ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Let’s clarify what an IP address is, what it is used for, and how you can protect it apareció primero en Bitfinance.

Online grooming is not a new threat; however, the methods predators use to contact and target children and teens are constantly evolving. ESET, a leading company in proactive threat detection, through its Digipadresinitiative, analyzes how online harassment and grooming now often originate in everyday virtual spaces—such as multiplayer video game platforms, community servers, and direct messaging applications—and not exclusively on traditional social networks. Understanding what grooming is and how it has evolved in recent years can help families identify warning signs without assuming that every friendship formed online is dangerous.

Grooming is a process by which an adult deliberately establishes a relationship with a child or adolescent, often lying about their true identity or age, to gain their trust before exploiting or abusing them. Although this crime can occur in both physical and digital environments, the internet has completely changed the ease with which abusers can contact minors and the difficulty adults face in detecting what is happening.

Online grooming can begin in any space where a child or teenager interacts with others: multiplayer video games, social media, messaging apps, live chat rooms, or online communities built around shared interests. From their home, a single abuser can contact dozens or even hundreds of children and teenagers.

The incorporation of new digital tools, including artificial intelligence, makes it easier for online predators to create highly convincing fake identities, perfecting their fictitious profiles to match the tastes and language of their victims. However, Digipadres warns that, despite technological advances, the underlying psychological strategy remains unchanged: abusers continue to exploit the natural need for friendship, attention, understanding, and a sense of belonging that children and teenagers experience.

“Unlike offline harassment, which is restricted by geographical barriers and limited opportunities for physical contact, the internet allows an abuser to simultaneously contact dozens or hundreds of minors from their home, taking advantage of the dynamism and immediacy of the digital environment. Despite the emergence of new technologies, the best protection strategy for mothers, fathers, and caregivers remains the same: maintain open communication, promote healthy digital habits, and constantly monitor children,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

The risk is grows; children must be protected

In the initial stages of grooming, contact rarely begins with explicit sexual content or threats. Instead, it follows a gradual pattern of manipulation:

• Simulated genuine interest: They show unusual interest in the child’s hobbies, favorite games, or everyday situations.
• Building trust: They provide constant emotional support, validation, and compliments to quickly establish an emotional bond.
• Migration to private channels: They encourage the shift of interactions from public or group chats to private messages or encrypted messaging applications.
• Demand for secrecy: They ask the minor to keep the relationship strictly confidential from their parents, teachers, or friends.
• Gradual introduction of personal/sexual topics: Once a bond of trust is established, they gradually introduce intimate conversations.
• Manipulation and emotional pressure: They resort to guilt, coercion, or threats if the victim tries to distance themselves or end the conversation.

Faced with this constantly evolving dynamic, the specialist emphasizes that assuming any friendship formed online is inherently dangerous is not the solution. Instead, active and conscious guidance from responsible adults is essential.

To mitigate the risks of grooming, ESET recommends prioritizing the following preventative measures:

1. Maintain open and continuous communication: Basic measures, such as parental controls and clear rules about technology use, can help, but should never replace open communication. Foster an environment of trust so that children can express doubts, concerns, or uncomfortable situations without fear of judgment or punishment.
2. Promote healthy digital habits: Teach privacy guidelines, the importance of not sharing sensitive information, and the proper configuration of digital accounts.
3. Constant involvement: Actively participate in the virtual environments frequented by children, understanding the dynamics of their favorite games and platforms.

“New apps, artificial intelligence tools, and online communities will continue to transform the digital environment, making it impossible to anticipate every new platform or trend. Instead of trying to keep up with every technological change, mothers, fathers, and caregivers can focus on what is most important and lasting: helping children and adolescents develop the confidence needed to recognize manipulation attempts, question suspicious behavior, and know that they can always ask for help. These are skills that will remain useful no matter what the internet looks like in five or ten years,” emphasizes Micucci from ESET.

Digipadres is an ESET initiative, based on SaferKidsOnline, designed to support and raise awareness among mothers, fathers, teachers, and caregivers about the safe and responsible use of technology by children and adolescents. Through educational content, practical guides, and current research, it provides key tools to protect minors in the digital ecosystem.

To learn more, visit: https://digipadres.com/novedades/147-la-evolucion-del-grooming-en-linea-como-los-agresores-en-linea-captan-a-ninos-y-adolescentes.

More news from ESET and cybersecurity at: https://www.welivesecurity.com/es/

ESET invites you to learn more about cybersecurity in Venezuela by visiting: https://www.eset.com/ve/, and following them on social media @eset_ve. Also on Instagram @esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada The evolution of online grooming: How predators target children and teens in new digital environments apareció primero en Bitfinance.

ESET, a leading company in proactive threat detection, is part of GENDEII –Gender and Diversity, Equity and Inclusion (DEI) Indicators for European and Latin American Technology Companies, and Related Training Strategies– a research project funded by the European Union with a strong Ibero-American component. The project brings together institutions from various countries and aims to reduce discrimination in recruitment and career advancement –including discrimination generated by artificial intelligence algorithms–.

The initiative unites 24 institutions from Europe and Latin America –including universities and civil society organizations– with the goal of promoting diversity, equity, and inclusion (DEI) strategies and mainstreaming a gender perspective in the technology sector. The consortium involves more than 100 researchers, specialists, and institutional representatives from Argentina, Brazil, Chile, Colombia, Costa Rica, Spain, Italy, Peru, Portugal, and Uruguay, and is led by the University of Córdoba (Spain).

ESET will be the only private company on the research team. This reflects the company’s strong commitment to inclusion, not only internally but also within the community.

“We are proud to be the only private company in this project, which reaffirms our long-standing commitment to sustainability and transparency. Diversity and inclusion are essential pillars of our organizational culture, and we believe they enrich development and drive technological innovation. We are excited to contribute our vision to combat inequalities and build a more equitable and just technology sector,” says Carolina Kaplan, Sustainability and Diversity Leader for ESET Latin America.

For four years, GENDEII will work on designing indicators and tools to strengthen inclusive organizational cultures, improve the management of diverse talent, and support innovation processes with a gender and diversity perspective. The project will seek to address growing challenges in the technology sector related to attracting and retaining talent, inequalities in access to and professional development, and the impact of biases present in some artificial intelligence systems used in selection and recruitment processes. The proposal focuses not only on workplace inclusion but also on creating organizational conditions that foster career development, avoiding all forms of segregation, through a comprehensive approach that also considers spatial accessibility and a critical analysis of AI use.

Among its main deliverables, GENDEII will develop a Gender and Diversity Indicators Manual for technology companies and an international training program for leaders and corporate teams. Both resources will be designed based on evidence derived from scientific research and through collaborative work with diverse groups of people who are still underrepresented in the workforce: women, LGBTQ+ individuals, migrants, people with disabilities, autistic and neurodivergent individuals, religious minorities, people of color, among others.

The international GENDEII project was selected with an excellent score in the European Union’s Horizon Europe program within the framework of the Marie-Curie Staff Exchanges Actions (MSCA-SE). This program is one of the most competitive and prestigious, with over 360 proposals submitted worldwide, and the project will receive approximately €2 million in funding.

In addition to its cross-sectoral approach, the project has an interdisciplinary focus: specialists from fields such as Psychology, Education, Civil Engineering, Law, Economics, Sociology, Political Science, Anthropology, Communication, Computer Science, Arts, and Business Management are participating. Its strength also lies in the fact that it promotes dialogue between academic and non-academic sectors of the global north and south.

As Dr. Débora Imhoff, Principal Investigator of the project, points out, “GENDEII is based on a central idea: diversity, equity, and inclusion policies, and the mainstreaming of a gender perspective, not only contribute to reducing historical inequalities, but also strengthen innovation, improve work environments, collective well-being, and enhance the creativity and sustainability of organizations.” She further emphasizes: “The project places the contributions of a gender and diversity, equity, and inclusion (DEI) approach at the forefront as a driver of innovation that improves talent management processes, decision-making, increases innovation, reduces turnover, and enhances corporate reputation. This perspective promises better business outcomes, expands market opportunities, while increasing employee well-being, improving the employability of historically excluded sectors, and fostering equity, pluralism, and inclusion.”

The GENDEII Project represents a commitment to the responsibility and dedication of all sectors of society towards sustainability and the promotion of more just, equitable, and democratic societies, in which ESET Latin America is very proud to participate.

Visit them at:

@ESETLA     /company/eset-latinoamerica      /esetla      /ESETLA      /@esetla.

For more valuable information on cybersecurity, also available in Venezuela: https://www.eset.com/ve/. And on social media: @eset_ve.

Information courtesy of ESET and Comstat Roland

(Main reference image source: Luke Hales on Unsplash)

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET joins European project to combat inequalities in the technology sector apareció primero en Bitfinance.

In crisis situations or natural disasters, social vulnerability is not only evident on the streets, but also in the digital environment. The initial disorganization and the massive flow of unverified information create the ideal scenario for cybercriminals to deploy social engineering tactics aimed at emotionally manipulating people and compromising their financial assets or personal data.

José Luis Rangel, Commercial Manager of ESET Venezuela, explains the tactics used by attackers during times of high stress: “In times of crisis, natural disasters, or pandemics, cybercriminals use social engineering strategies, which involve the psychological manipulation of individuals and corporations to deceive them and obtain sensitive information.”

Main types of fraud detected during emergencies

• Fake donation and fundraising pages: Creation of fraudulent websites and unofficial victim registrations that request immediate transfers, taking advantage of the public’s willingness to help.
• Hijacking of messaging accounts (WhatsApp): Compromising personal profiles to send mass messages to contact networks requesting financial assistance or selling currency under a false identity.
• Manipulation with Artificial Intelligence: Generation of fake multimedia content—deceptive news stories, altered audio or video—to simulate rescue situations or fictitious family emergencies.
• Risks on open Wi-Fi networks: Exploitation of community or open, password-free connections to intercept data traffic and confidential information from connected users.
• Deceptive offers of supplies or services: Requests for advance payments or down payments for heavy machinery rental or logistical support services that are never actually provided.

Pay close attention, guidelines: Recommended prevention measures

To avoid falling victim to these threats during critical times, it is essential to apply active verification principles and exercise caution before sharing data or carrying out any type of transaction:

• Verify web addresses (URLs): Carefully check the address bar of any website before clicking or entering credentials.
• Validate the recipients of donations: Be wary if a supposed NGO or aid organization requests transfers via mobile payment or other means directed to individuals instead of institutional accounts.
• Protect confidential data: No aid organization, bank, or official platform will request debit or credit card security codes, passwords, or validation tokens.
• Be wary of emotional urgency: Maintain a critical perspective when viewing chain messages or links that demand immediate action by appealing to panic or the urgent need for help.

In the face of information fragmentation during disasters, cybersecurity education and constant verification are fundamental barriers to protecting both citizens and organizations.

For more valuable information on cybersecurity, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla, @esetla_ve) and Facebook (ESET).

Information and main image provided by ESET and Comstat Roland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET’s recommendations for identifying and avoiding digital scams during emergencies apareció primero en Bitfinance.

ESET, a leading company in proactive threat detection, announces that registration remains open for the Premio ESET al Periodismo en Seguridad Informática are eligible to participate with articles related to the contest theme, published in media outlets in the region between August 30, 2025, and the contest closing date of August 24, 2026.

The winning entry will be awarded a trip to Tokyo, Japan, to participate in the ESET World 2027 global cybersecurity conference. Prizes will also be awarded to the winners of each category. And, as in previous years, special distinctions will be given for each region (Brazil, Mexico, Andean Region, Río de la Plata Region, Central American Region, and South American Caribbean Region).

This regional initiative is supported by the  Fundación Gabo and the ACHIPEC organization (Chilean Association of Journalists and Professionals).

Those interested in participating can register in three different categories according to their professional development: Print Media, Digital Media, and Multimedia Media. Registration is limited to one entry per category. For evaluation and selection, the following criteria will be considered: the socially relevant approach of the chosen cybersecurity topic and its interest to the community, the originality of the research, the in-depth treatment of the information, the narrative quality, and the correct use of technical terminology. A panel of judges made up of renowned journalists and specialists from the region will evaluate all submitted works.

To learn more and register for the 2026 ESET Cybersecurity Award, visit: https://www.eset.com/latam/premio-periodistas/.

For other useful preventative information, also available in Venezuela: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

ESET also invites you to visit: https://www.welivesecurity.com/es/.

With information provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Last days to register: ESET Cybersecurity Journalism Award apareció primero en Bitfinance.

AI is optimizing and transforming cybercriminals’ tools, helping them craft more convincing lures, scale social engineering campaigns, and accelerate reconnaissance. Organizations are wise to pay attention to this trend, as existing security gaps are urgent proof of the need for cyber preparedness.

ESET, a leading company in proactive threat detection, asserts that the first points of failure remain familiar and typically involve: a phishing link clicked by an employee or a vulnerability that has not been patched in time. Unlike truly AI-driven malware (which remains rare), these threats continue to be among the most important for companies seeking to improve their preparedness.

“Fortunately, the threats that continue to cause the majority of incidents also have proven mitigation measures that can help keep your company secure,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

According to the ESET SMB Cyber ​​Readiness Index 2026, “AI-driven malware” is identified as the top concern for SMEs globally for the coming year. In North America, the figure is even higher (33%). However, if this concept is understood as malware that uses AI in an automated, real-time manner, it is more of a topic for the research community than for cybersecurity professionals.

ESET discovered the first example of AI-written ransomware in 2025 and maintains that even in that case, it was likely a proof of concept (PoC). On the other hand, PromptSpy, discovered by ESET earlier this year, was the first known Android malware to use generative AI (GenAI) within its execution flow to achieve persistence.

“Threat researchers have made relatively few, if any, similar discoveries. Likewise, ESET’s MDR service has no evidence of incidents where generative AI played a significant role. Threat actors do benefit from AI support, but few are implementing this technology in real time for truly automated tasks,” the ESET researcher explains.

According to ESET, a more cost-effective approach for SMB leaders would be to pay closer attention to the root causes of incidents. In many SMEs, the first point of failure remains far more familiar: a phishing message that succeeds, an unpatched vulnerability, an alert that goes unnoticed, or a password that should never have been reused. These aren’t the most eye-catching cybersecurity risks, but they remain some of the most important for businesses looking to improve their preparedness and protection.

Top threats and risks for small businesses

• Phishing (26 %): ESET telemetry reveals that phishing was the most frequently detected threat during the second half of 2025 (30.8 %), and volumes continue to rise. Social engineering has always been a favorite tactic of threat actors, and both SMS phishing messages (smishing) and fraudulent phone calls (vishing) are gaining popularity. Technology can play a significant role in defense, but staff training and awareness are also critical and are often more difficult to implement correctly.
• Unpatched Security Vulnerabilities (23 %): Even the smallest organizations can operate a wide variety of software, and not everything can be kept up-to-date simply by turning on automatic updates. Understanding which systems are in operation and what critical data and assets might be exposed is the first challenge. The sheer volume and frequency with which new vulnerabilities are discovered today, coupled with the limited experience available to test and implement critical updates, can also represent significant obstacles.
• Lack of security oversight (22 %): You may have numerous security tools, but do you have a single, centralized place to collect, correlate, and highlight alerts? Effective monitoring is critical to accelerating threat detection and response. However, even companies that already have monitoring systems in place can be overwhelmed by the number of alerts, making it difficult to distinguish between false positives and real threats.
• Weak passwords (20 %): A security challenge as old as computing itself. Despite industry advancements toward phishing-resistant multi-factor authentication (MFA) and the use of passkeys, many organizations still rely on static passwords to protect their most important assets. Furthermore, employees often reuse them, increasing the risk of security breaches. Creating a strong password policy is the first step; enforcing it is the next.

Among the tried and tested solutions for common threats, ESET mentions that the key is recognizing that many of the aforementioned risks are exacerbated by AI, rather than this technology creating entirely new threats. For example, attackers are using AI to:

• Improve the quality of phishing messages (including the use of deepfakes) and scale and manage campaigns.
• Reduce the time needed to exploit vulnerabilities by quickly identifying and turning new flaws into attack tools.
• Analyze large volumes of data to identify frequently used passwords.
• Perform reconnaissance on targets to determine attack routes more quickly.

It can also reduce the time available for organizations to respond. If cybercriminals can identify vulnerable systems more quickly, develop exploit code more easily, or automate parts of their processes, the window between vulnerability disclosure, exploitation, and a successful attack could narrow even further. This is especially relevant for SMEs already struggling with asset inventory and patch prioritization. One of the key lessons is that neglecting the fundamentals increases the cost.

“The good news is that best practices remain effective for improving security posture. Vulnerability and patch management is a good starting point. Continuously scan operating systems and applications for known CVEs to identify exposures and then automatically deploy updates based on policies and risk level,” recommends Micucci.

Identity security is becoming increasingly critical. Password managers can generate and store strong, unique credentials for employees, but multi-factor authentication (MFA) is now an essential line of defense. Use privileged account management (PAM) tools to reduce the attack surface and protect high-risk accounts.

Address the shortage of specialized security personnel and improve monitoring by outsourcing detection and response to a trusted provider. Using a managed detection and response (MDR) service can also reduce the complexity and integration challenges that 21% of SMEs identify as their main barrier to improving their security posture.

“Ultimately, no organization is too small to become a target for an attack, so adopting a proactive approach to cybersecurity is essential. True cyber preparedness involves the ability to prevent, detect, and respond to threats — a fundamental milestone on the path to business resilience. And it can be achieved much faster by having a realistic view of the threats the organization faces. Not those that generate the most sensational headlines, but those that are causing real damage,” concludes Mario Micucci of ESET Latin America.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram  (@esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada SMEs must implement essentials to protect themselves from attacks and cyber threats apareció primero en Bitfinance.

An alleged attack on the Civil Defense alert system, based on Cell Broadcast technology, triggered the sending of false alerts to cell phones in various Brazilian cities, generating concern about the security of critical infrastructure used to protect the population.  ESET, a leading company in proactive threat detection, contextualizes the case and analyzes different protection strategies related to this type of system.

According to a report issued by the Brazilian Federal Government and sent to the Federal Police (PF), the first messages were sent to Rio de Janeiro. Subsequently, residents of Curitiba, Brasília, São Paulo, Salvador, and other locations also received notifications classified as “extreme alert,” considered the highest level in the Civil Defense alert system. This type of message is used in situations of imminent risk to life, requiring the population to take immediate protective measures.

In the case of Rio de Janeiro, the message referred to a supposed possibility of landslides, particularly sensitive information in a region historically affected by tragedies related to heavy rains. Messages also circulated mentioning a supposed possibility of a tornado in the Belo Horizonte region (MG) and other unfounded warnings. The texts contained disjointed phrases, corrupted fields, and unusual expressions, including references to a supposed “alien attack.”

The incident occurs at a time when Latin America is facing a sustained increase in extreme weather events. According to the World Meteorological Organization (WMO), in recent years the region has been affected by phenomena such as floods, droughts, hurricanes, and large-scale forest fires, reinforcing the importance of early warning systems to protect the population.

“In this context, several countries in the region are adopting alert systems based on Cell Broadcast, a technology that allows mass messaging to be sent to all mobile devices in a specific area, without the need for applications or an internet connection,” explains Jonathan Ramos, Cybersecurity Researcher at ESET Latin America.

Some implementation examples in the region include:

• Chile is the most established case, with its Emergency Alert System (SAE) fully operational and regularly used in the event of natural disasters, while Brazil already has large-scale mobile alert infrastructure, as evidenced in this incident.
• Mexico has conducted trials in recent years, partially integrating Cell Broadcast into its seismic alert system. Other countries, such as Ecuador, are in the initial or pilot stages.
• Argentina is making progress in deploying its national AlertAR system, based on this technology.

A compromised alert system can generate panic, misinformation, and diminish the credibility of official emergency communications

“As governments adopt more efficient technologies to alert the population, the attack surface on critical systems also increases. A compromised alert system can generate panic, misinformation, and eventually diminish the credibility of official communications in real emergency situations,” highlights Ramos from ESET.

One detail that stood out in this case was the repetition of the word “misanthropy” in various messages, functioning as a kind of signature left by those responsible. The term is used to describe people who express aversion, distrust, or rejection of humanity and social coexistence.

The case is being investigated by the National Civil Defense in conjunction with the National Telecommunications Agency (Anatel). The suspicion is that the incident involved unauthorized access to the Public Alert Dissemination Interface (Idap), a platform used by the Ministry of Integration and Regional Development (MIDR), with the support of the National Civil Defense, to send alerts related to risks of natural disasters and other emergencies.

In the first hours after the incident, a user identified as “Misantropo” on the social network X posted images and a video claiming responsibility for the messages. The disseminated material suggests the use of a government platform to send the alerts.

In an interview with the TecMundo website, the alleged attacker claimed to have used old Idap credentials that had been exposed in previous leaks. According to his account, access was obtained through a technique known as credential stuffing, which involves the automated reuse of username and password combinations previously compromised in other incidents.

“Although the perpetrators and details of the intrusion are still under investigation, the incident reinforces the importance of adopting robust authentication mechanisms, continuous monitoring, and periodic credential reviews in systems considered critical to public safety,” ESET added.

The authorities responded by temporarily deactivating the platform. In an official statement, the Civil Defense of the state of São Paulo reported that the message received by the public was not issued by the agency and that it immediately initiated verification procedures together with the National Civil Defense, Anatel (the Brazilian telecommunications regulator), and other institutions involved in the system’s operation. “To date, there is no record of any event that would justify issuing an extreme alert related to the reported content,” the agency stated.

“The incident highlights the risks associated with protecting government systems responsible for essential services. Cyber ​​incidents on critical infrastructure platforms expose vulnerabilities that transcend the technological sphere, revealing flaws in security policies and procedures. The use of supposedly leaked credentials reinforces the urgency of governance practices, such as the application of the principle of least privilege, mandatory multi-factor authentication (MFA), and the periodic rotation of passwords. For systems with high social impact, the implementation of the Four-Eyes Principle is indispensable. This validation layer mitigates the risk of isolated actions, whether malicious or accidental, preventing false alerts from generating panic and misinformation, and above all, preserving public trust in legitimate state protection mechanisms,” concludes Jonathan Ramos of ESET.

The investigation should clarify whether there was indeed an intrusion into the Civil Defense systems or if the incident was caused by the misuse of valid credentials obtained from previous leaks.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at:  https://www.eset.com/ve/,, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Automated alerts in Brazil with fake “extreme emergency” calls alarmed the population apareció primero en Bitfinance.

ESET, a leading company in proactive threat detection, presents the ESET Threat Report, its threat report for the first half of 2026, which summarizes trends in the threat landscape observed through ESET telemetry, as well as the perspectives of the company’s threat detection and research specialists (from December 2025 to May 2026). The report reveals how attackers continue to improve the efficiency and scalability of their operations, as, instead of relying on entirely new methods and tools, they are rapidly adapting established techniques to new platforms, technologies, and user behaviors.

Key findings from the report

• ClickFix — a social engineering technique that leverages fake error messages—has expanded into AI-themed help pages, browser extensions, and cloud authentication scenarios.
• QR code phishing — also known as “quishing”—has reached record levels in ESET telemetry.
• ESET analyzed nearly 900,000 AI skills — small functional components used by AI agents—and identified tens of thousands of suspicious instances and thousands of malicious ones. AI is also beginning to appear within malware.
• Ransomware showed no signs of slowing down, with its continued use of “EDR killers”—tools designed to disable security software during attacks.

Artificial intelligence is playing an increasingly important role. During the first half of 2026, ESET analyzed nearly 900,000 AI skills — small functional components used by AI agents — and identified 25,000 suspicious instances and more than 3,000 outright malicious instances. The number of AI skills within this emerging ecosystem is growing, expanding the attack surface.

AI is also beginning to appear within malware itself. Shortly after the emergence of the first AI-powered ransomware in 2025, the ESET research team identified PromptSpy, the first known Android malware to use generative AI in its execution flow. This malware leverages AI—specifically Google’s Gemini—to interpret user interface elements and adapt to different devices and environments without relying on hardcoded behaviors.

“Instead of resorting to entirely new methods and tools, attackers are rapidly adapting established techniques to new platforms, technologies, and user behaviors.” “The number of AI capabilities within this new ecosystem is growing rapidly right now, further expanding the attack surface,” says Jiří Kropáč, Director of ESET’s Threat Prevention Labs. “On the other hand, PromptSpy illustrates the potential for greater flexibility in future threats, although the abuse protection measures included in large language models (LLMs) are likely hindering its adoption,” Kropáč explains.

AI skills are small plugins or sets of instructions that tell an AI agent how to perform a specific task, including which services or tools to use and what data to access. The published report addresses details about malicious AI skills that use third-party hacking tools and a suspicious self-modifying skill designed to create a persistence mechanism (JSON file) and a tool for self-modification (Python code). This can lead to unpredictable agent behavior or its misuse by an attacker. Finally, there are benign but problematic skills, such as those marketed as security scanners, which create a false sense of security but only implement basic scanning techniques—like antivirus tools from the 1990s—or simply check the reputation of hashes, URLs, and IP addresses on VirusTotal.

Unique AI skills analyzed by ESET systems (per day, average of seven)

Meanwhile, ClickFix—a social engineering technique that leverages fake error messages—has expanded beyond bogus CAPTCHA requests to encompass AI-related help pages, browser extensions, and cloud authentication scenarios. AI-fix shows how attackers exploit trust in generative AI, embedding ClickFix compromise chains into AI-generated troubleshooting content for nonexistent issues on pages that abuse the domains of AI giants. ConsentFix highlights an evolution toward token theft, combining ClickFix-style interaction with OAuth authorization abuse to hijack cloud accounts without stealing credentials, often bypassing two-factor authentication (MFA) and relying entirely on legitimate login workflows. ESET’s detections of this vector more than doubled between the second half of 2025 and the first half of 2026, indicating sustained activity and constant adaptation.

Phishing campaigns are also evolving in response to user behavior. QR code phishing—also known as “quishing”—has reached record levels in ESET telemetry, with attackers embedding malicious links in QR codes to evade inspection and redirect user interaction to mobile devices, while exploiting the implicit trust many people place in barcodes with square patterns. Approximately 11 % of all phishing emails detected in the first half of 2026 used QR codes, with QR code phishing threats being most prevalent in the US (19 % of detections), Spain (17 %), and Mexico (6 %).

Finally, ransomware activity showed no signs of slowing down, with the continued use of “EDR killers” — tools designed to disable security software during attacks. ESET’s research team has documented more than 100 different EDR killers in circulation, and new variants appear regularly. The number of ransomware attacks continued to grow in the first half of 2026, but the number of victims willing to pay reached historic lows. Three recent industry reports confirmed this downward trend, indicating that between 14% and 28% of victims paid the ransom.

More information can be found at: https://www.welivesecurity.com/es/informes/eset-threat-report-informe-de-amenazas-primer-semestre-2026/

ESET invites you to learn more about cybersecurity by visiting https://www.eset.com/ve/ in Venezuela, and following them on social media @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and reference image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET releases its cyber threat report for the first half of 2026: AI has increased attacker efficiency apareció primero en Bitfinance.

It might sound exaggerated, but a large part of our lives revolves around our cell phones: photos, emails, online banking, social media, work, sensitive documents, conversations. That’s why ESET, a leading company in proactive threat detection, is sharing the steps to follow for a quick phone security check. This is extremely important for all users.

“In 10 minutes and with simple actions, you can detect risks, close unnecessary access points, and prevent problems before they occur. This significantly reduces the risk of your entire digital life becoming vulnerable,” explains Mario Micucci, Cybersecurity Researcher at ESET Latin America.

Minute 1–2: Update – The first step is to install available updates for both the operating system and the applications you use. It’s crucial to have the latest version installed because cybercriminals know how to exploit old vulnerabilities or weaknesses to carry out their attacks.

Minute 3: Lock – Activate device locking with a PIN, pattern, or biometric data. Ideally, avoid using common patterns or birthdates, and configure your screen to lock automatically as soon as possible. Physical access remains one of the simplest ways to compromise a device, since an unlocked cell phone allows anyone to access apps, emails, and social networks.

Minute 4: Delete – Review the list of installed applications and delete those you no longer use or recognize. Reducing the number of apps also reduces the entry points for cybercriminals.

Minute 5: Limit – Another important point regarding apps is to control the permissions they request. For example, does a flashlight app really need access to your contacts? You can check this in the “Settings” menu, then go to “Privacy,” and under “Permissions,” limit those you consider unnecessary or suspicious. According to ESET, the danger is clear: the microphone can listen to ambient noise, the camera can record without your knowledge, and location services can constantly track your movements.

Minute 6: Reduce – Decrease your attack surface by turning off Bluetooth when not in use and deleting saved public Wi-Fi networks. Both public Wi-Fi networks and active Bluetooth can be used by cybercriminals to intercept information or attempt unauthorized connections.

Minute 7: Enable – Activate two-factor authentication (2FA) on all possible accounts: email, WhatsApp, Instagram, Facebook, Google, Apple ID, etc. This prevents malicious actors from hijacking your account, stealing your networks and contacts, and accessing your banking services.

Minute 8-9: Back Up – It’s advisable to check if you have active backups (on Google Drive or iCloud), confirm when the last backup was performed, and enable automatic backups of photos, contacts, files, and system data if they aren’t already configured. Not all security incidents can be prevented. Backups are what allow you to recover your information, and if you don’t have a recent copy, the impact can be more severe.

Minute 10: Boost – Install a reliable security solution that provides protection against phishing sites and malicious apps, and detects malware in real time. Not all threats are visible: in fact, as users, we often don’t detect malicious links, dangerous apps, or suspicious behavior in time, and a security solution adds constant monitoring, reducing the margin for human error. ESET solutions, for example, include protection for online banking and payments, blocking of sensitive applications, and anti-theft tools to locate or lock your device in case of loss or theft.

“Cybersecurity isn’t about magic solutions, but about small habits that can make a big difference. This 10-minute security check is a step toward a better-protected device. Since most digital incidents occur due to minor oversights or carelessness (installing an unofficial app, not updating systems, a weak password), a good goal is to make this quick and concise check a daily habit. And thus, enjoy your digital life more safely,” concludes Micucci from ESET.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/

For other useful preventative information, also available in Venezuela:  https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla)  and Facebook (ESET).

Information provided by ESET and Comstat Rowland

Image source: Rodion Kutsaiev on Unsplash

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Perform a quick security check on your phone in 10 minutes apareció primero en Bitfinance.