ToddyCat Hackers Exploit ESET Flaw to Launch Stealthy TCESB Attack

A security vulnerability (CVE-2024-11859) was found in the command line scanner of ESET antivirus software, which hackers used to deploy malware TCESB to bypass detection. The attacker placed the malicious dynamic link library version.dll in the scanner directory, forcing the program to run malicious code. The vulnerability was discovered by Kaspersky Lab and notified ESET to fix it.

ToddyCat Hackers Exploit ESET Flaw to Launch Stealthy TCESB Attack

A cybercriminal group linked to a series of attacks across Asia has been exploiting a security vulnerability in ESET’s security software to deploy a previously unknown malware strain called TCESB. This threat takes advantage of a flaw in ESET’s security tools to bypass defenses and silently execute malicious code on compromised devices. The malware was linked to ToddyCat, a known advanced persistent threat (APT) group believed to be operating ou…

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

A Chinese-affiliated threat actor known for its cyber-attacks in Asia has been observed exploiting a security flaw in security software from ESET to deliver a previously undocumented malware codenamed TCESB. "Previously unseen in ToddyCat attacks, [TCESB] is designed to stealthily execute payloads in circumvention of protection and monitoring tools installed on the device," Kaspersky said in an