Tag: Kaspersky
A loader hid inside Windows update folders on Asian government PCs
Kaspersky found NetamLoader abusing AppDomainManager injection from a CAB file parked in SoftwareDistribution, on a Windows 10 build reserved for…
Chinese bootkit defeats Secure Boot via skipped revocation
Diplomatic targets in Central Asia were infected by a firmware implant that exploits an unblocklisted certificate most admins never revoked.
Iran-linked job scam bans AI help that could flag its hidden RAT
Kaspersky ties fake coding tests with a no-AI rule to two new Iranian RATs built for Windows, Linux, and macOS.
Kaspersky zero-day exploit drops rogue DLL on patched Windows
Researcher Chaotic Eclipse published HardBreacher, a working exploit for a Kaspersky Endpoint Security privilege escalation zero-day.
Signed wallpaper app slips ValleyRAT past antivirus exclusions
Kaspersky ties the backdoor's new disguise to Silver Fox, which hid it inside a signed Chinese wallpaper tool.
First malware rides legitimate car head unit updates
Kaspersky finds a downloader pushed through built-in firmware updaters of Android dashboards, tied to the MoYu Group.
Head Mare swaps TrueConf installers for PhantomCore backdoor
Kaspersky says the Head Mare group exploited a two-flaw chain in unpatched TrueConf servers to poison client installers with the…
Memory-only backdoors OctLurk and SilkLurk stalk Central Asia
Kaspersky ties two memory-resident backdoors to government network intrusions across Central Asia.