kaspersky

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking

• Malware

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking

Do Son June 9, 2026 0

Read the Kaspersky malware analysis revealing how the Argamal Trojan campaign targets adult gamers using stealthy COM hijacking.

The Q1 2026 Exploit Surge: AI Discovers the Flaws, APTs Reap the Rewards

• Vulnerability Report

The Q1 2026 Exploit Surge: AI Discovers the Flaws, APTs Reap the Rewards

Do Son May 11, 2026 0

Kaspersky reports a record surge in CVEs for Q1 2026. Discover how AI-driven exploits, authentication bypasses, and new C2 trends are reshaping cyber defense.

OceanLotus Hijacks PyPI to Deploy “ZiChatBot” via Enterprise Chat APIs

• Cyber Security
• Malware

OceanLotus Hijacks PyPI to Deploy “ZiChatBot” via Enterprise Chat APIs

Do Son May 7, 2026 0

OceanLotus targets Python developers worldwide via PyPI supply chain attacks. New ZiChatBot malware hijacks Zulip APIs for invisible C2 traffic. Patch now!

Trojanized Tools: DAEMON Tools Supply Chain Attack Compromises Global Systems

• Malware

Trojanized Tools: DAEMON Tools Supply Chain Attack Compromises Global Systems

Do Son May 6, 2026 0

Kaspersky warns that DAEMON Tools installers (v12.5) are trojanized with the QUIC RAT. Signed binaries are being used for global espionage. Update and audit now!

Scammers Weaponize Amazon SES to Bypass Security

• Cybercriminals

Scammers Weaponize Amazon SES to Bypass Security

Do Son May 5, 2026 0

Scammers are leveraging Amazon SES and leaked IAM keys to bypass security filters. Learn how to protect your organization from this high-trust phishing surge.

Tax Audit Trap: Silver Fox Unleashes “ABCDoor” via Modified Rust Loaders

• Malware

Tax Audit Trap: Silver Fox Unleashes “ABCDoor” via Modified Rust Loaders

Do Son May 4, 2026 0

Silver Fox targets India and Russia with tax-themed phishing and the new ABCDoor backdoor. Learn how this Python-based threat hijacks screens and data.

The Unpatched Pivot: New RPC Flaw Opens Doors for Windows Privilege Escalation

• Vulnerability Report

The Unpatched Pivot: New RPC Flaw Opens Doors for Windows Privilege Escalation

Do Son April 27, 2026 0

Kaspersky reveals PhantomRPC, a novel Windows architectural flaw enabling LPE to SYSTEM. Microsoft denies a patch. Monitor SeImpersonatePrivilege now.

“FakeWallet” Trojan Masquerades as Crypto Wallets to Drain Assets

• Malware

“FakeWallet” Trojan Masquerades as Crypto Wallets to Drain Assets

Do Son April 22, 2026 0

Kaspersky unmasks "FakeWallet," a Trojan on the Apple App Store using stubs & enterprise profiles to steal crypto seed phrases. Learn how to protect your keys.

JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts

• Malware

JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts

Do Son April 15, 2026 0

JanelaRAT targets banking users in Brazil and Mexico using window monitoring and fake updates. Learn how this 2026 threat bypasses MFA to hijack sessions.

The Proxifier Trap: The “Fileless” Marathon Stealing Your Crypto

• Malware

The Proxifier Trap: The “Fileless” Marathon Stealing Your Crypto

Do Son April 14, 2026 0

Kaspersky reveals a fileless Trojan campaign targeting Proxifier searches. Learn how this "ClipBanker" hijacks crypto wallets via search engine poisoning.

The CPUID Watering Hole Attack Turning CPU-Z into a Trojan

• Malware

The CPUID Watering Hole Attack Turning CPU-Z into a Trojan

Do Son April 13, 2026 0

April 2026 Alert: CPUID downloads for CPU-Z and HWMonitor were poisoned with STX RAT via DLL sideloading. Check your systems for CRYPTBASE.dll now!

Trolling as a Service: How the New CrystalX RAT Uses “Prankware” to Torture Its Victims

• Malware

Trolling as a Service: How the New CrystalX RAT Uses “Prankware” to Torture Its Victims

Do Son April 7, 2026 0

Kaspersky uncovers CrystalX RAT, a malicious MaaS on Telegram that pairs data theft with "prankware" to troll victims and lock systems. Patch now!

The Return of Operation Triangulation: Coruna Exploit Kit Targets M3 and A17 Chips in Massive iOS Offensive

• Vulnerability Report

The Return of Operation Triangulation: Coruna Exploit Kit Targets M3 and A17 Chips in Massive iOS Offensive

Do Son April 2, 2026 0

Kaspersky reveals Coruna, an elite iOS exploit kit targeting A17 & M3 chips. Reusing Operation Triangulation flaws, it’s now hitting the mainstream. Patch now!

Infected Out of the Box: “Keenadu” Backdoor Hijacks Android at the Firmware Level

• Malware

Infected Out of the Box: “Keenadu” Backdoor Hijacks Android at the Firmware Level

Do Son February 18, 2026 0

Kaspersky uncovers Keenadu, a firmware-level Android backdoor infecting the Zygote process. This pre-installed malware gives attackers full control.

Game Over: “RenEngine” Malware Hides in Pirated Visual Novels

• Malware

Game Over: “RenEngine” Malware Hides in Pirated Visual Novels

Do Son February 17, 2026 0

Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.

Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT

• Malware

Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT

Do Son February 9, 2026 0

Stan Ghouls group targets Uzbekistan via fake court emails and malicious Java loaders. Learn how they deploy NetSupport RAT to spy on victims.

HoneyMyte Evolved: Spies Use Pixeldrain & CoolClient for Real-Time Surveillance

• Cyber Security
• Malware

HoneyMyte Evolved: Spies Use Pixeldrain & CoolClient for Real-Time Surveillance

Do Son January 28, 2026 0

HoneyMyte (Mustang Panda) shifts to real-time surveillance using updated CoolClient. New 2025 campaign uses Pixeldrain for stealthy exfiltration.

The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments

• Cyber Security
• Malware

The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments

Do Son January 1, 2026 0

Kaspersky unmasks HoneyMyte's 2025 campaign, using the ProjectConfiguration.sys kernel rootkit to deploy ToneShell backdoors with elite stealth.

“Webrat” Trap: Hackers Lure Junior Security Researchers with Fake GitHub Exploits

• Malware

“Webrat” Trap: Hackers Lure Junior Security Researchers with Fake GitHub Exploits

Do Son December 24, 2025 0

Kaspersky warns of Webrat malware targeting researchers via fake GitHub PoCs for CVE-2025-10294 and other high-CVSS flaws to install a backdoor.

Academic Ambush: How the Forum Troll APT Hijacks Scholars’ Systems via Fake Plagiarism Reports

• Cyber Security
• Malware

Academic Ambush: How the Forum Troll APT Hijacks Scholars’ Systems via Fake Plagiarism Reports

Do Son December 18, 2025 0

The Forum Troll APT is targeting Russian scholars with highly personalized phishing lures and the Tuoni framework disguised as plagiarism reports.

Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies

• Cyber Security
• Malware

Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies

Do Son December 1, 2025 0

Kaspersky exposed Tomiris APT using a "polyglot" strategy (Go/Rust/Python) and Telegram/Discord for covert C2. The group targets foreign ministries with implants that steal file paths and reconnaissance data.

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025

• Vulnerability Report

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025

Do Son November 28, 2025 0

Kaspersky reveals critical NTLM flaws active in 2025. Attackers use "clickless" exploits like CVE-2024-43451 to steal credentials and gain SYSTEM privileges.