In crisis situations or natural disasters, social vulnerability is not only evident on the streets, but also in the digital environment. The initial disorganization and the massive flow of unverified information create the ideal scenario for cybercriminals to deploy social engineering tactics aimed at emotionally manipulating people and compromising their financial assets or personal data.

José Luis Rangel, Commercial Manager of ESET Venezuela, explains the tactics used by attackers during times of high stress: “In times of crisis, natural disasters, or pandemics, cybercriminals use social engineering strategies, which involve the psychological manipulation of individuals and corporations to deceive them and obtain sensitive information.”

Main types of fraud detected during emergencies

• Fake donation and fundraising pages: Creation of fraudulent websites and unofficial victim registrations that request immediate transfers, taking advantage of the public’s willingness to help.
• Hijacking of messaging accounts (WhatsApp): Compromising personal profiles to send mass messages to contact networks requesting financial assistance or selling currency under a false identity.
• Manipulation with Artificial Intelligence: Generation of fake multimedia content—deceptive news stories, altered audio or video—to simulate rescue situations or fictitious family emergencies.
• Risks on open Wi-Fi networks: Exploitation of community or open, password-free connections to intercept data traffic and confidential information from connected users.
• Deceptive offers of supplies or services: Requests for advance payments or down payments for heavy machinery rental or logistical support services that are never actually provided.

Pay close attention, guidelines: Recommended prevention measures

To avoid falling victim to these threats during critical times, it is essential to apply active verification principles and exercise caution before sharing data or carrying out any type of transaction:

• Verify web addresses (URLs): Carefully check the address bar of any website before clicking or entering credentials.
• Validate the recipients of donations: Be wary if a supposed NGO or aid organization requests transfers via mobile payment or other means directed to individuals instead of institutional accounts.
• Protect confidential data: No aid organization, bank, or official platform will request debit or credit card security codes, passwords, or validation tokens.
• Be wary of emotional urgency: Maintain a critical perspective when viewing chain messages or links that demand immediate action by appealing to panic or the urgent need for help.

In the face of information fragmentation during disasters, cybersecurity education and constant verification are fundamental barriers to protecting both citizens and organizations.

For more valuable information on cybersecurity, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla, @esetla_ve) and Facebook (ESET).

Information and main image provided by ESET and Comstat Roland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET’s recommendations for identifying and avoiding digital scams during emergencies apareció primero en Bitfinance.

An alleged attack on the Civil Defense alert system, based on Cell Broadcast technology, triggered the sending of false alerts to cell phones in various Brazilian cities, generating concern about the security of critical infrastructure used to protect the population.  ESET, a leading company in proactive threat detection, contextualizes the case and analyzes different protection strategies related to this type of system.

According to a report issued by the Brazilian Federal Government and sent to the Federal Police (PF), the first messages were sent to Rio de Janeiro. Subsequently, residents of Curitiba, Brasília, São Paulo, Salvador, and other locations also received notifications classified as “extreme alert,” considered the highest level in the Civil Defense alert system. This type of message is used in situations of imminent risk to life, requiring the population to take immediate protective measures.

In the case of Rio de Janeiro, the message referred to a supposed possibility of landslides, particularly sensitive information in a region historically affected by tragedies related to heavy rains. Messages also circulated mentioning a supposed possibility of a tornado in the Belo Horizonte region (MG) and other unfounded warnings. The texts contained disjointed phrases, corrupted fields, and unusual expressions, including references to a supposed “alien attack.”

The incident occurs at a time when Latin America is facing a sustained increase in extreme weather events. According to the World Meteorological Organization (WMO), in recent years the region has been affected by phenomena such as floods, droughts, hurricanes, and large-scale forest fires, reinforcing the importance of early warning systems to protect the population.

“In this context, several countries in the region are adopting alert systems based on Cell Broadcast, a technology that allows mass messaging to be sent to all mobile devices in a specific area, without the need for applications or an internet connection,” explains Jonathan Ramos, Cybersecurity Researcher at ESET Latin America.

Some implementation examples in the region include:

• Chile is the most established case, with its Emergency Alert System (SAE) fully operational and regularly used in the event of natural disasters, while Brazil already has large-scale mobile alert infrastructure, as evidenced in this incident.
• Mexico has conducted trials in recent years, partially integrating Cell Broadcast into its seismic alert system. Other countries, such as Ecuador, are in the initial or pilot stages.
• Argentina is making progress in deploying its national AlertAR system, based on this technology.

A compromised alert system can generate panic, misinformation, and diminish the credibility of official emergency communications

“As governments adopt more efficient technologies to alert the population, the attack surface on critical systems also increases. A compromised alert system can generate panic, misinformation, and eventually diminish the credibility of official communications in real emergency situations,” highlights Ramos from ESET.

One detail that stood out in this case was the repetition of the word “misanthropy” in various messages, functioning as a kind of signature left by those responsible. The term is used to describe people who express aversion, distrust, or rejection of humanity and social coexistence.

The case is being investigated by the National Civil Defense in conjunction with the National Telecommunications Agency (Anatel). The suspicion is that the incident involved unauthorized access to the Public Alert Dissemination Interface (Idap), a platform used by the Ministry of Integration and Regional Development (MIDR), with the support of the National Civil Defense, to send alerts related to risks of natural disasters and other emergencies.

In the first hours after the incident, a user identified as “Misantropo” on the social network X posted images and a video claiming responsibility for the messages. The disseminated material suggests the use of a government platform to send the alerts.

In an interview with the TecMundo website, the alleged attacker claimed to have used old Idap credentials that had been exposed in previous leaks. According to his account, access was obtained through a technique known as credential stuffing, which involves the automated reuse of username and password combinations previously compromised in other incidents.

“Although the perpetrators and details of the intrusion are still under investigation, the incident reinforces the importance of adopting robust authentication mechanisms, continuous monitoring, and periodic credential reviews in systems considered critical to public safety,” ESET added.

The authorities responded by temporarily deactivating the platform. In an official statement, the Civil Defense of the state of São Paulo reported that the message received by the public was not issued by the agency and that it immediately initiated verification procedures together with the National Civil Defense, Anatel (the Brazilian telecommunications regulator), and other institutions involved in the system’s operation. “To date, there is no record of any event that would justify issuing an extreme alert related to the reported content,” the agency stated.

“The incident highlights the risks associated with protecting government systems responsible for essential services. Cyber ​​incidents on critical infrastructure platforms expose vulnerabilities that transcend the technological sphere, revealing flaws in security policies and procedures. The use of supposedly leaked credentials reinforces the urgency of governance practices, such as the application of the principle of least privilege, mandatory multi-factor authentication (MFA), and the periodic rotation of passwords. For systems with high social impact, the implementation of the Four-Eyes Principle is indispensable. This validation layer mitigates the risk of isolated actions, whether malicious or accidental, preventing false alerts from generating panic and misinformation, and above all, preserving public trust in legitimate state protection mechanisms,” concludes Jonathan Ramos of ESET.

The investigation should clarify whether there was indeed an intrusion into the Civil Defense systems or if the incident was caused by the misuse of valid credentials obtained from previous leaks.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at:  https://www.eset.com/ve/,, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Automated alerts in Brazil with fake “extreme emergency” calls alarmed the population apareció primero en Bitfinance.

Mass-appeal events have become prime targets for global cybercrime. With the 2026 FIFA World Cup approaching, the cybersecurity company ESET Venezuela organized a specialized online event to analyze the main digital threats facing fans.

 During the session, experts shared and explained that collective enthusiasm and the urgency to obtain tickets or exclusive promotions often cloud users’ judgment. This psychological factor is exploited by attackers to carry out large-scale financial scams and identity theft.

 Most common frauds in online football

The technical presentation detailed that the most common types of fraud operate through:

Cloning websites dedicated to selling tickets.

Deceptive offers of travel packages and accommodations.

Furthermore, ESET analysts examined for participants how cybercriminals use social media, instant messaging applications, and fake websites. Using advanced social engineering techniques, attackers impersonate official sponsors to trick victims into downloading malicious applications, compromising their mobile devices and exposing their banking information.

Key digital security tips for the World Cup season

To mitigate this vulnerability, the ESET Venezuela team shared practical recommendations for maintaining safe browsing during the global event:

• Verify the authenticity of all links received.
• Avoid entering credentials or financial data on unofficial platforms.
• Be wary of raffles or prizes of dubious origin.

In this way, the company reaffirmed the need to adopt a digital security approach to fully enjoy the biggest football event without putting technological, personal, or corporate assets at risk.

To learn more about cybersecurity, visit the ESET website:  https://www.eset.com/ve/. You can also follow them on social media: Instagram @esetla) and Facebook (ESET).

Information and image courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Experts analyze cyber scams related to the 2026 World Cup: Beware of a digital own goal apareció primero en Bitfinance.

ESET, the leading company in proactive threat detection, announced a €40 million investment in the future of AI-driven cybersecurity, as the company warns of a rapidly emerging new attack surface fueled by autonomous, agency-enabled AI systems.

The commitment — announced by ESET CEO Richard Marko at ESET World 2026 — comes in response to a shift ESET has observed in its own data. Since March 2026, ESET technologies have analyzed nearly 800,000 unique AI skills (modular components that instruct AI agents on how to perform tasks, use tools, access services, and interact with external systems). Approximately 25,000 of these skills were classified as suspicious, and more than 3,000 were blocked for being malicious.

This total represents a 13-fold increase compared to the approximately 60,000 publicly available skills observed earlier this year. According to ESET’s research team, AI skills are part of a rapidly growing layer in the software supply chain, often connecting sensitive systems to external repositories, plugins, datasets, and third-party services.

“Cybersecurity is entering a completely new era,” said Richard Marko, CEO of ESET. “Artificial intelligence is no longer just a defensive tool. It is becoming part of the attack surface itself. Our investment is focused on ensuring that AI strengthens cybersecurity rather than weakening it, and on developing technologies capable of protecting organizations in a world of autonomous AI.”

The initiative aims to strengthen ESET’s technological independence and European sovereignty in cybersecurity at a time when access to advanced artificial intelligence systems is increasingly concentrated in the hands of a small number of global technology companies. “We believe that the future of cybersecurity cannot depend entirely on models controlled by large technology companies,” added Marko.

“In cybersecurity, sovereignty matters”

Backed by a three-year recruitment plan that will grow ESET’s R&D team to 1,000 dedicated research and engineering professionals, the €40 million investment will focus on three strategic areas:

• Independent, security-priority core AI models
• A comprehensive, layered AI security architecture
• The next-generation AI SOC

“ESET has long been at the forefront of applying AI to cybersecurity,” said Juraj Jánošík, Vice President of Artificial Intelligence at ESET. “What is changing now is the role that AI plays.” AI tools are becoming part of everyday work, autonomous systems are expanding the attack surface, and security teams need faster ways to respond to threats. This investment allows us to work across the spectrum: protecting the use of AI, building AI models for cybersecurity, and incorporating autonomous capabilities into security operations under human supervision.”

Standard, security-priority AI models

ESET will accelerate the development of its own security-centric AI models, designed specifically for cybersecurity applications. Unlike general-purpose AI systems trained on broad internet content, ESET’s models will be optimized using cybersecurity telemetry and real-world threat intelligence gathered over ESET’s nearly 35-year history.

The company will continue to expand its existing AI-powered technologies (such as ESET LiveGrid, ESET LiveCortex, and ESET LiveGuard) while exploring emerging AI concepts, including “World Models” capable of understanding behavior, context, and intent within digital environments.

Design, development, and implementation of a comprehensive, layered AI security architecture

As AI becomes more integrated into everyday business operations, ESET is developing a comprehensive, AI-native security architecture designed to protect organizations against emerging AI-driven risks and threats. The investment will include the development of ESET Secure AI Relay, a secure intermediary layer between users, AI agents, business applications, and AI models.

The leading cybersecurity company will also develop network-level safeguards and protections for communication between AI agents. ESET AI Skills Checker (a free tool launched at the RSAC 2026 conference), along with its enhanced versions integrated into ESET products, was specifically designed for this emerging ecosystem of agent-based AI systems.

Building the Next Generation AI SOC

A new generation of AI-powered Security Operations Center (SOC) technologies will be designed to address the increasing scale and complexity of modern detection and response environments. Instead of simply replacing analysts with AI agents, ESET aims to fundamentally rethink how cybersecurity telemetry is processed, correlated, and understood. The company’s vision is to make advanced AI-powered cybersecurity accessible not only to large enterprises but also to small and medium-sized organizations through supervised and highly automated protection technologies.

“Cybersecurity cannot grow simply by adding more alerts, more dashboards, and more complexity,” added Marko. “The industry needs to take another major leap forward. We believe that artificial intelligence should help make world-class cybersecurity simple and accessible to everyone.”

To learn more about ESET solutions, visit: https://www.eset.com/latam/empresas/protect-platform/ and/or simply https://www.eset.com/latam/

ESET invites you to delve deeper into cybersecurity by visiting: https://www.welivesecurity.com/es/.

For useful preventative information and details on services and products, visit https://www.eset.com/ve/ and their social media channels @eset_ve. You can also find them on Instagram (@esetla) and Facebook (ESET).

Information and images courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET to invest €40 million in AI to counter the rise of sophisticated attacks apareció primero en Bitfinance.

The radical transformation of digital crime has forced corporations to abandon static security schemes. In response to this situation, the fifteenth edition of ESET Security Day, one of the most significant annual technology events held in the Venezuelan capital, took place to showcase the new cybersecurity paradigm, where attacks have ceased to be isolated incidents and have become automated operations enhanced by Artificial Intelligence (AI) tools.

Michele Flammia, General Manager of ESET Venezuela, highlighted the value of these informative forums for protecting the region’s business ecosystem. During the event, the brand’s specialists demonstrated, through a live simulation, how modern groups operate and how technologies such as XDR (Extended Detection and Response) and threat intelligence allow for action before the impact materializes.

Innovation in response and strategic advantages

Camila Oliveira, Channel Manager of ESET LATAM (currently based in the regional office in Argentina), addressed cybersecurity as a competitive advantage, inspired by Stephen Covey’s bestseller, The 7 Habits of Highly Effective People. During his presentation, he detailed the capabilities of the continuous training programs (AARNES) and the value of the managed detection service:

“We want companies to understand that technology and cybersecurity are not an expense, but an investment. ESET’s Managed Detection and Response (MDR) service has the shortest detection time on the market. Competitors use this technology differently, as they don’t offer 24/7 support and their response times are longer,” Oliveira emphasized.

The democratization of attacks through Artificial Intelligence

David González, Security Researcher at ESET Mexico, delivered a keynote address on the impact of generative AI models since the arrival of ChatGPT, a platform that has already reached 400 million users. The expert warned that this widespread adoption has led to a dangerous reduction in the technical barrier for criminals:

“In the cybercriminal world, we are witnessing a democratization of capabilities. It is no longer necessary to possess advanced technical knowledge to carry out an attack; AI allows for the generation of malicious code or the compromise of organizations in a matter of minutes. Time is working against the defenders,” González warned. Given this, he urged organizations to adopt the Diamond Model to dynamically analyze four key aspects of the adversary: ​​infrastructure, capabilities (such as zero-day exploits), victims, and the attacker’s motivations.

An unprotected market against autonomous attacks

For his part, José Luis Rangel, Commercial Manager of  ESET Venezuela warned about the growing interest of digital criminal organizations in targeting critical sectors such as healthcare, energy, and telecommunications using autonomous AI agents. Rangel posed a direct question to the companies and attendees: “What are you doing? It is important that we consider what the organization is doing to prepare before an attack occurs.”

Finally, Carlos López, Pre-Sales Manager at ESET Venezuela, provided critical metrics on corporate neglect in the face of technological evolution over the last 15 years. He explained that between 35 % and 37 % of companies lack basic defenses, and only 41 % have proactive detection and response capabilities.

In addition, 39 % of firms do not have a defined policy for the use of artificial intelligence, which facilitates data breaches. The regional situation reflects that one in four organizations in Latin America does not implement basic security measures, 51 % report having suffered incidents, and it is estimated that an attack occurs every 39 seconds globally.

The speakers emphasized that companies can no longer rely on reactive solutions, which compels corporate leaders to become directly involved in cyber defense and adopt advanced visibility tools to neutralize threats before suffering irreversible financial impacts.

For more information, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla) and Facebook (ESET).

Thanks to on-site coverage, more information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales.

Audiovisual production: Jesús Ramírez

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Security Day Venezuela: Experts reveal that one-third of companies lack basic protection apareció primero en Bitfinance.

In a digital environment where threats are relentless, national productive sectors face a critical scenario: an attempted cyber intrusion every minute. Given this reality, analyzed by ESET Venezuela experts during their 7th Technology Breakfast for Journalists, data protection has ceased to be a technical option and has become a priority for economic survival.

Today, efficient risk management and the adoption of global standards are the only barriers capable of preventing a complete business shutdown.

During this high-level meeting, emerging trends that are redefining the protection of digital assets were explored. Special emphasis was placed on how local organizations must adapt their infrastructures in the face of the increase in sophisticated attacks that jeopardize operations and data integrity in an increasingly interconnected and demanding ecosystem.

Michele Flammia, General Manager of ESET Venezuela, welcomed attendees, highlighting the brand’s commitment to digital education and protecting strategic assets against current challenges.

Alarming figures that drive proactive action

Carlos López Rodríguez, the company’s Support and Training Manager, emphasized that cybersecurity must be viewed as an ongoing process: “Prevention and training cost less than stopping an attack once it has begun.” He also emphasized that certifications and work on control frameworks provide a real guarantee to third parties and clients.

For his part, José Luis Rangel, Commercial Manager of ESET, warned about the lack of visibility in the market: “Almost 40 % of companies don’t know if they are currently being compromised or if they were in the past.”

According to experts, a cyberattack occurs worldwide every 39 seconds, making it a statistically more likely threat than a fire. The economic impact of this operational paralysis can be reduced by up to 97% with adequate investment in training and frameworks such as ISO 27001 or NIST.

The human factor and social engineering

Martina López, a cybersecurity researcher at ESET Latin America, highlighted that social engineering remains the primary entry point for criminals. Using techniques like quishing (QR phishing) and dynamic phishing, attackers exploit the sense of urgency and trust of employees. In the country, the most frequently impersonated entities include DocuSign, MetaMask, and the Telegram platform, taking advantage of peak interest in AI tools and the current national situation.

Key recommendations for resilience

To strengthen defenses, specialists suggest three fundamental pillars:

• Tabletop Drills: Practicing crisis scenarios allows for the identification of weaknesses in response protocols before a real disaster occurs.
• Real Certification: Obtaining third-party endorsements that validate international standards provides real trust and security to clients.
• Device Security: Disable notifications on the lock screen to prevent the theft of passwords or credentials and always enable two-factor authentication (2FA).

Cybersecurity requires operational maturity; it is contradictory to fear quantum computing while working with obsolete systems. As López concluded, “training and practicing will always cost less than stopping a cyber intruder’s operation once it has begun.”

Video coverage with more details

For more information, visit the ESET website: https://www.eset.com/ve/. Also, follow them on social media: Instagram (@esetla) and Facebook (ESET).

Through on-site coverage and information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales

Audiovisual production: Ida Febres

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Venezuela: A cyberattack occurs every 39 seconds; prevention reduces downtime costs by up to 97 % apareció primero en Bitfinance.

At Bancamiga, cybersecurity is a core pillar of business continuity and its reputation. In an ecosystem where trust is the most valuable asset, protecting data integrity is a strategic business imperative.

For Sergio Saggese, Executive Director of Technology, Processes, and Information Security at Bancamiga, digital transformation is a change in business models and a necessity to compete in today’s markets. However, the accelerated pace of digital transformation has broadened the scope of exposure to cyberattacks. These attacks are perpetrated in a highly sophisticated manner, primarily aimed at blocking critical operations to demand ransoms, using techniques that employ Artificial Intelligence to emulate voices or legitimate banking platforms.

During the conference “Managing the Digital Age: Cybersecurity Implications for Businesses,” delivered this Wednesday to students at Monteávila University, Saggese stated that attacks occur daily and companies must protect themselves. It is essential to understand that there are threats and what those threats are.

“Cybercrime takes advantage of human error, whether by action or omission, misconfigurations, and vulnerable code. There are targeted attacks that utilize third-party connections and interconnected devices, which serve as entry points to internal networks. A chain is only as strong as its weakest link,” he indicated.

He expressed that digital transformation is inevitable to offer agile, personalized, and competitive services that are securely structured from the design stage on four pillars: cloud adoption, AI, the Internet of Things, and data analytics.

For Bancamiga’s CEO, Sergio Saggese, the question today isn’t “whether we will be attacked,” but rather “how quickly will we detect, respond to, and recover from an attempted attack?”

To protect an organization, it’s necessary to shift from a reactive approach to a proactive and defensive stance. The starting point should be “never trust, always verify.” Every access request, whether from inside or outside the network, must be constantly authenticated, authorized, and validated. Continuous training for employees and partners, with content tailored to the customer experience, is also key. It’s essential to strengthen monitoring capabilities and prepare for the moment of an attack.

Saggese maintained that there must be a comprehensive and holistic process for managing cybersecurity, and this is where the focus on cyber resilience —an organization’s ability to anticipate, resist, confront, and recover from adverse cyberattacks— becomes crucial.

“It’s about strengthening the company’s capacity to resist and respond. Cybersecurity isn’t just about resisting, but about navigating the storm.”

The conference attendees, mostly first-year engineering students, expressed their gratitude with words and applause for the concepts presented by Saggese, recognizing their contribution to their holistic development.

Information and images provided by Bancamiga Banco Universal                        

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Sergio Saggese: Cybersecurity is a fundamental pillar of business continuity apareció primero en Bitfinance.

The Gentlemen ransomware attacked more than 250 victims in 17 countries, including Mexico, Colombia, Chile, and Argentina, and represents a new era of customized and ultra-adaptive attacks. Unlike other groups, this Ransomware as a Service (RaaS) studies the specific defenses of its victims and adapts its tools during the campaign to overcome existing controls. ESET, a leading company in proactive threat detection, analyzes the new landscape of ransomware groups and warns how this disciplined, meticulous, and highly methodical organization has disrupted traditional approaches to become one of the most active threats since July 2025.

“It is an emerging Ransomware-as-a-Service group that burst onto the cybercrime scene in mid-2025. Unlike other groups with more sloppy or rustic aesthetics, The Gentlemen stands out for its polished brand identity. It even maintains a leak site on the dark web with a professional logo and a slogan that reinforces its image as a disciplined and highly detail-oriented organization. This professionalism is not merely aesthetic; it is reflected in the precision of its attacks and the technical quality of its tools,” says Martina Lopez, cybersecurity researcher at ESET Latin America.

Their operating model is based on double extortion, a tactic where they not only encrypt the victim’s files to block access, but also exfiltrate confidential data before encryption. Once they possess the information, they threaten to publish it on their leaks site if a ransom is not paid. This strategy puts massive pressure on companies, especially those that cannot afford a public data breach.

A ransomware attack by The Gentlemen typically begins by exploiting exposed internet access points (systems with open administration) or using previously stolen credentials. Once inside, they deploy tools to scan the internal network, understand how the company is organized, and identify users with elevated privileges, especially those with full access to the systems.

To move within the network and escalate the attack, they use tools that allow them to remotely execute actions on multiple computers and modify key configurations. In this way, they manage to distribute the ransomware simultaneously across all connected devices, further weakening security mechanisms to facilitate remote access and control.

In the final stage, they combine two critical actions: first, they steal sensitive information and send it to external servers in encrypted form; second, they lock down systems using encryption. Once the attack is complete, they execute processes designed to erase their tracks: they delete activity logs, remote connections, and any evidence that could allow them to reconstruct what happened, thus hindering subsequent investigations.

Their first documented victim was registered on June 30, 2025, and since then, their activity has not ceased. They have affected critical sectors such as manufacturing, construction, healthcare, insurance, and financial services.

Geographically, their impact is global, but the most affected countries include the United States and Thailand, followed by India, Mexico, Colombia, Spain, and France. This distribution suggests that the group takes advantage of access opportunities wherever they arise, without an apparent geopolitical agenda.

In mid-March 2026, they published on their website the attack on two organizations in Colombia in the healthcare and media sectors. During February, they attacked a government scientific research institute in Argentina, and in March, they claimed responsibility for an attack on an organization in Chile. According to the ransomware.live website, they also reported victims in Brazil, Peru, Ecuador, Venezuela, Guatemala, the Dominican Republic, Costa Rica, and Panama.

ESET provides the following list of recommendations to protect yourself from The Gentlemen ransomware:

• Reduce internet exposure: review which systems are accessible from outside and close any unnecessary access, especially administration panels or remote access.
• Protect credentials: use unique and strong passwords, enable two-factor authentication, and monitor any suspicious logins.
• Keep everything up to date: apply security patches to operating systems, servers, and applications. Many of their intrusions exploit known vulnerabilities.
• Detect anomalous behavior: Implement solutions that allow you to identify unusual activity within the network, such as after-hours access or unexpected remote executions.
• Limit privileges: Not all users need full access. Reducing permissions minimizes the impact if an account is compromised.
• Segment the network: Separating critical systems prevents an attacker from moving freely and compromising the entire infrastructure.
• Perform backups: Carry out regular backups and store them in isolation, verifying that they can be restored correctly.
• Train the team: Human error remains one of the main entry points. Awareness is key.

“In a scenario where attacks are no longer massive but personalized, the question is no longer whether an organization can be targeted, but when. Understanding how groups like The Gentlemen operate is the first step to anticipating a threat that no longer gives warning,” concludes Lopez from ESET.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For useful preventative information, visit https://www.eset.com/ve/ and follow them on social media @eset_ve, Instagram (@esetla), and Facebook (ESET.

Information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada New generation of ransomware targets Latin America with tailored attacks that cause severe damage apareció primero en Bitfinance.

Last November, the UK’s Security Service alerted members of Parliament about a foreign intelligence-gathering scheme: two LinkedIn profiles were contacting people working in British politics to request “insider information.” The MI5 revelations triggered a £170 million ($230 million) government initiative to address espionage threats against Parliament. While this is a high-profile case, ESET, a leading company in proactive threat detection, states that it is far from the first or only one. The site could also be a veritable treasure trove of corporate data that could be maliciously used to support fraud or threat campaigns.

Therefore, it is important to learn from this analysis and valuable professional opinion provided by ESET.

LinkedIn has amassed over one billion members worldwide since its founding in 2003. This represents a vast pool of potential targets for state-backed or financially motivated threat actors. Firstly, it is an extraordinary source of information where malicious actors can discover the roles and responsibilities of key individuals within a target company and reconstruct or reshape the relationships between individuals and projects they might be working on. Furthermore, it provides credibility and cover because, as a professional network, it is frequented by both high-level executives and lower-level employees, and it is a context in which a victim is more likely to open a direct message or InMail from someone on the platform than an unsolicited email.

On the other hand, it bypasses “traditional” security because there is no guarantee that phishing messages, malware, or spam won’t get through; and due to the site’s perceived credibility, target users may be more likely to click on malicious content. Finally, it’s easy to start operating; anyone can create a profile and begin lurking on the site to gather intelligence or send phishing messages and Business Enforcement (BEC) scams. Furthermore, attackers can hijack existing accounts or create fake identities before posing as candidates and recruiters for positions and jobs. The large number of compromised credentials circulating on cybercrime forums (due in part to infostealers) makes this relatively easy.

There are several ways threat actors can operationalize their malicious campaigns:

• Phishing and spearphishing: By using the information users share in their profiles, attackers can customize phishing campaigns (fake emails) to increase their success rate.
• Direct attacks: Contact can be made directly through malicious links designed to deploy malware, such as infostealers, or promote fake job offers intended to steal credentials.
• BEC: Similar to phishing, LinkedIn provides a wealth of intelligence that can be used to make Business Email Compromise attacks appear more convincing. It can help scammers identify who reports to whom, what projects they are working on, and the names of partners or suppliers.
• Deepfakes: LinkedIn can also host videos of targeted individuals, which can be used to create deepfakes and employ them in subsequent phishing, BEC, or social media scams.
• Account hijacking: Fake LinkedIn pages (phishing), infostealers, credential stuffing, and other techniques can help attackers take control of user accounts. These hijacked accounts can then be used in subsequent attacks targeting their contacts.
• Attacks on suppliers: LinkedIn can also be tracked for information about partners of a target company, who would also be targeted with phishing as part of a malicious “domino effect” strategy.

“The challenge posed by threats on LinkedIn is that IT departments find it difficult to obtain accurate information about the extent of the risk their employees face, and the tactics used to attack them. However, it makes sense to include LinkedIn threat scenarios like those described above in security awareness training courses. Employees should also be warned about the risk of oversharing information on the platform and given guidance on how to detect fake accounts and typical phishing lures,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

ESET provides information on various threat groups that have used some of these tactics

• The Lazarus Group (North Korea) has posed as recruiters on LinkedIn to install malware on the computers of people working at an aerospace company, according to ESET Research. In fact, the research team also recently described the “Wagemole” campaigns, in which individuals aligned with North Korea attempt to obtain employment at foreign companies.
• ScatteredSpider contacted MGM’s help desk, impersonating an employee whose identity they obtained from LinkedIn, in order to gain access to the organization. The subsequent ransomware attack resulted in losses of $100 million.
• A spearphishing campaign called “Ducktail” targeted marketing and human resources professionals on LinkedIn, delivering malware and stealing information through links sent via direct message. The malware was hosted in the cloud.

Prevention

“To prevent account hijacking, a policy of regularly updating patches should be followed, security software should be installed on all devices (from a trusted vendor), and multifactor authentication should be enabled. Additionally, in corporate environments, it may be worthwhile to organize specific training sessions for executives, who are often the most frequent targets of attacks. Above all, ensure that the team is aware that, even on a network considered trustworthy like LinkedIn, not everyone acts in good faith or in their best interest,” recommends the ESET researcher.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla)  and Facebook (ESET).

Information and image provided by ESET

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Malicious actors hunt and manipulate on the important LinkedIn network; we must protect ourselves apareció primero en Bitfinance.

ESET Venezuela successfully held its 9th Technology Breakfast with media outlets and journalists specializing in cybersecurity, an essential meeting to analyze digital risks and redefine corporate protection in the era of Artificial Intelligence (AI).

The event focused on dismantling misconceptions, highlighting the need for a comprehensive protection strategy, and addressing social responsibility.

Demystifying digital defense

Michele Flammia, General Manager of ESET Venezuela, began the discussion by refuting common myths. He warned that the belief that only computers require protection, ignoring mobile phones, exposes users to serious risks, especially when downloading applications from unofficial sources or granting excessive permissions.

Flammia emphasized that cybersecurity is not the sole responsibility of the company’s IT (Information Technology) department, but rather a culture that must permeate the entire organization. He also dismissed the idea that users and SMEs “have nothing of value,” pointing out that intellectual property and personal information are prized assets for attackers.

Therefore, he recommended maintaining strong passwords and using multi-factor authentication as basic and mandatory measures.

The high cost of corporate vulnerability

Carlos López Rodríguez, Support and Training Manager at ESET Venezuela, presented compelling figures. The specialist revealed that the average global cost of a security breach is $4.44 million, a figure that increases to $4.9 million if the incident is caused by malicious insiders.

López emphasized the need to address reported vulnerabilities, citing cases where security flaws remained uncorrected for years, even in large corporations like Telefónica (affected by the WannaCry ransomware in 2017). He warned that one in six attacks is now powered by Artificial Intelligence, making prevention more critical than ever.

“If an organization has a vulnerability that was reported seven years ago and does nothing to fix it, something is happening at every level,” López stated, arguing that inaction is a global risk.

The expert highlighted that modern AI-based tools can save companies up to $1.9 million in costs after a breach, although only 49 % of organizations invest in security after being attacked.

The average recovery time from an attack, for those companies or institutions that manage to recover, is 276 days, a period of high operational vulnerability.

Sustainability and global responsibility

José Luis Rangel, marketing manager, who oversees sustainability matters in Venezuela, closed the day by speaking on “ESET’s Sustainable Management – ​​Experiences in Latin America.” Rangel highlighted that the company is one of the few in the sector that aligns its strategy with the UN Sustainable Development Goals (SDGs) and the Global Compact.

This management approach seeks a balance between environmental, social, and economic factors. It involves promoting gender equality, effective human talent management, and responsibility throughout the value chain, demonstrating that digital security is integrated with a global commitment to sustainability.

Rangel shared some of the sustainability initiatives they have implemented in Latin America and Venezuela in recent years, which are aligned with ESET’s four pillars of action in the region: environment, value chain, employees, and community.

For more information, visit the ESET website:  https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla, @eset_ve) and Facebook (ESET).

Through on-site coverage by DOBLE LLAVE and El Sumario, as well as with information and main image provided by Comstat Rowland

Audiovisual production and general photography: Jesús Ramírez

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada ESET analyzes how cybersecurity is the new strategic pillar of business success apareció primero en Bitfinance.