ESET Threat Report H1 2023
Guides|15 September 2023
Twice a year ESET collates its threat research to bring you an overview of the key trends and findings. Businesses can use this to gain insight into the cyber security landscape, and use it help identify areas that need further protection.
Key findings
- In H1 2023, cybercriminals demonstrated adaptability in pursuing various malicious goals.
- Attack patterns shifted due to stricter Microsoft security policies, leading attackers to use weaponised OneNote files.
- Microsoft adjusted its measures, pushing cybercriminals to explore alternative intrusion methods like brute-force attacks on Microsoft SQL servers.
- The Emotet botnet operators struggled to adapt, suggesting a possible change in ownership.
- Ransomware actors increasingly reused leaked source code, enabling better detection coverage.
- Cryptocurrency threats declined but persisted with cryptomining and cryptostealing in versatile malware.
- This pattern resembles past malware evolution, such as keyloggers.
- Sextortion scam emails and deceptive Android loan apps targeting vulnerable individuals for financial gain resurfaced.
Download the full ESET threat report
Fill in your details below to access the full report.
By submitting this form you are agreeing to our Privacy Policy and Website Terms of Use.
If you have any questions about cyber security, please speak to a member of our cyber security team:
Call: +44 (0) 1364 655 181
Email: [email protected]
Grey Matter is an ESET Platinum Partner.
Related News
The importance of monitoring AI across your business
In this episode of Grey Matter Talks Tech our focus is the first third pillar of AI security readiness – Monitor. Monitor AI usage, behaviour and threats This episode explores how small and medium-sized businesses can monitor AI use, behaviour...
Cyber Essentials and identity security: Closing the gaps attackers exploit
Thu 12 November 2026 2:00 pm - 3:00 pm GMT
Cyber attackers no longer need to break through your defences when they can simply log in. As identities become the new security perimeter, managing who has access to what, and ensuring those permissions remain appropriate, has never been more important....
Black October 2026: the cyber security wake-up call businesses can’t ignore
October is Cyber Security Awareness Month. In 2026, it has delivered a rather different kind of awareness. Over a few days in October, a concentration of serious vulnerability disclosures, software supply-chain incidents and security breaches led commentators to start using...
The four layers of AI protection
Practical guard rails, controls and recovery measures to help your business use AI with confidence With the rise of AI being used as a productivity tool in the workplace, you need to know who and what can access your systems....