ESET H1 report tracks changes in a measured threat population

Findings and evidence

ESET’s H1 2026 report combines detection telemetry with malware research. It describes growth in ClickFix detections, QR-code phishing, scrutiny of AI-agent skills and continued use of tools that interfere with endpoint protection.

Why it matters

Use the report to form investigation and monitoring questions, then test them against local evidence. Comparing detection periods requires stable sensor coverage and an understanding of what each detection category includes.

Scope and limits

Vendor telemetry is a view of a monitored population, not all internet activity. A suspicious AI skill classification also differs from confirmed malicious execution.

Primary source

ESET Research: original publication. Source published 2026-07-08. Brief prepared by websec.gr on 26 September 2026. This is an editorial research summary, not a claim of independent replication.