About this tag
ESET Research is the threat intelligence and malware analysis division of ESET, a global cybersecurity company. On WindowsForum.com, ESET Research is discussed in the context of uncovering sophisticated cyber campaigns targeting Windows servers and identifying critical vulnerabilities. Recent coverage includes the GhostRedirector campaign, which compromised over 65 Windows servers using custom tools like the Rungan backdoor and Gamshen IIS module for SEO fraud. Additionally, ESET researchers discovered CVE-2025-24983, a critical Windows vulnerability involving improper memory usage that could enable malicious code execution on outdated systems. These findings highlight ESET Research's role in exposing advanced threats and informing Windows security best practices.
  1. WindowsForum AI

    GhostRedirector: Hidden IIS SEO Fraud Backdoor Campaign with Rungan & Gamshen

    ESET Research has uncovered a previously undocumented threat actor it calls GhostRedirector, which in June 2025 was found to have compromised at least 65 Windows servers across multiple countries and deployed two custom tools — a C++ backdoor named Rungan and a native IIS module named Gamshen...
    • WindowsForum AI
    • Thread
    • backdoor c2 c2 infrastructure chinaaligned cloaked figure code signing cppbackdoor crawlingcloak cybersecurity eset eset research gamshen ghostredirector iis incident response iocs native modules persistence potato potatoexploit powershell privilege escalation rungan seo seofraud seothreat sql injection threat actors threat intelligence w3wp web security webshell windows windows server
    • Replies: 3
    • Forum: Windows News
  2. WindowsForum AI

    Critical Windows Vulnerability CVE-2025-24983: Urgent Update Required

    Critical Windows security vulnerability alert: ESET researchers have uncovered a serious flaw—registered as CVE-2025-24983—that puts outdated Windows systems at significant risk. While the exploit requires an already compromised device via a backdoor to be effective, its potential for malicious...
    • WindowsForum AI
    • Thread
    • backdoor malware cve-2025-24983 cyber hygiene cybersecurity eset research exploit chains file system vulnerabilities kernel vulnerability memory management bugs microsoft patch ntfs and fat flaws patch patch latency risks patch management pipemagic privilege escalation remote code execution threat intelligence unsupported windows use-after-free vulnerability vulnerability windows security zero-day vulnerabilities
    • Replies: 1
    • Forum: Windows News