SMB cyber readiness: the road to resilience starts here
2026-06-27T08:51:43Z•1081db1e4b920dd8735ca849838b6e8668402a110fd0e702d4184b1d83d82a00
AI-related-threatsAPTAndroid-RATEDR-evasionOT-securitySMB-securitybackdoorbotnetcloud-securitycredential-theftcybercrime-scamsinfostealerkernel-drivermalwarephishingsupply-chainthreat-disruption
What happened
Collection of ESET WeLiveSecurity articles (Mar–Jun 2026) summarizing active threat activity, researcher findings, and defensive guidance. Notable coverage includes Gamaredon (new C2/exfiltration techniques), FishMonger’s SprySOCKS (Windows backdoor using a kernel driver), the global disruption of the Amadey botnet and Stealc infostealer, the Gentlemen RaaS group’s EDR-killer framework, EvilTokens credentialless phishing kit, new APTs (GopherWhisper, Webworm, FrostyNeighbor, OceanLotus, ScarCruft), Android threats (BTMOB RAT, CallPhantom), NGate trojanized NFC payment app, and broader topics (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- 1081db1e4b920dd8735ca849838b6e8668402a110fd0e702d4184b1d83d82a00
- Enrichment time
- 2026-06-27T08:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.