Investigaciones recientes han identificado una campaña de phishing que utiliza instaladores de ESET falsos para instalar una puerta trasera llamada , atribuida a un grupo vinculado con Rusia conocido como InedibleOchotense.

Many Facebook posts promising "100% working verified keys" do not display the keys directly. Instead, they redirect users to external link-shortening websites (like AdFly or Shorte.st) packed with intrusive pop-up ads, fake download buttons, and malicious redirects. Clicking these links can easily infect your computer with the very malware you are trying to avoid. 2. Fake "KMS" Activators and Keygens

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.

When you click a post promising "verified ESET keys," you are rarely taken directly to the text. Instead, you are redirected through URL shorteners (like AdFly or Shorte.st). These sites force you to view multiple advertisements, complete captchas, or enable browser notifications before revealing the key. The page owner makes money for every click you make. 2. Malicious Redirects and Drive-By Downloads

Built directly into Windows, highly effective, completely free, and continuously updated.

Be skeptical of Facebook posts or groups that show the following red flags:

I notice you've included the phrase — which translates to "updated ESET NOD32 licenses Facebook verified."

: Las actualizaciones no solo agregan nuevas firmas de virus, sino que también mejoran los algoritmos de detección, lo que permite al software identificar comportamientos sospechosos que podrían indicar la presencia de malware.

Archivos ejecutables (.exe) que pretenden ser un activador, pero infectan su equipo con ransomware o troyanos.