Banshee InfoStealer

Product
Solutions
Resources
Company

Schedule a demo

Campaign of the month

Learn about the latest cyber attacks and vulnerabilities in our monthly Campaigns.

Banshee InfoStealer

Banshee InfoStealer: The Threat You Can’t Ignore

A Next-Gen Malware Demands Next-Level Defense: Banshee InfoStealer is rewriting the rules with stealth tactics that evade even the sharpest security tools and most seasoned professionals. Traditional defenses aren’t enough—it’s time to outthink the adversary.

Our latest Spotlight uncovers how Banshee operates, from its inner workings to real-world attack scenarios. Here’s what you can expect:

A deep dive into the Banshee InfoStealer

A step-by-step forensic analysis of its evasive behavior

Pro threat-hunting strategies to stay ahead

Explore our latest Spotlight of the Month and gain a tactical edge against evolving cyber threats.

Past campaigns

Exploring CVE-2025-8088: How WinRAR became vulnerable to path traversal

On July 18th, 2025, ESET researchers publicly disclosed the CVE-2025-8088 vulnerability. Although WinRAR’s response was swift with the release of a patch (version 7.13) on July 30, 2025 the window between disclosure and patch availability was long enough for adversaries to weaponize the flaw and conduct successful intrusions. This campaign explores in depth how CVE-2025-8088 […]

Dissecting ToolShell: Multi-stage exploit chain targeting Microsoft SharePoint

Microsoft recently faced critical vulnerabilities in on-premises SharePoint servers that have been actively exploited in the wild. To mitigate these threats, Microsoft issued customer guidance and released security updates for CVE-2025-53770 and CVE-2025-53771, covering all supported SharePoint versions. In this month’s campaign, we’re dissecting this multi-stage exploit chain, known as the ToolShell campaign. Let’s dig […]

Exploring real-world MSI™ Afterburner RTCore driver exploitation

Threat actors are increasingly exploiting legitimate signed software to gain elevated privileges and bypass system defenses. In this month’s campaign, we will explore the RTCore driver (RTCore64.sys) from MSI™ Afterburner, used for overclocking graphics cards, and how, when running in kernel mode, it can provide low-level access to hardware. Overview of the RTCore driver exploitation […]