The devil is still in the email – but wearing a new mask

ESET WeLiveSecurity feed covering September 2026 through May 2026. The collection highlights phishing and quishing, cryptocurrency and impersonation scams, AI-assisted fraud and malware, vulnerable software and supply chains, APT activity, ransomware, infostealers, backdoors, Android malware, EDR evasion, OT security, and UEFI Secure Boot bypass vulnerabilities. Notable research includes SparroWocky associated with FamousSparrow, Gamaredon operations, FishMonger’s SprySOCKS backdoor, BTMOB Android RAT, EvilTokens phishing, and vulnerable Microsoft-signed UEFI shims.