A new extortion cocktail: office printers, small ransoms, and BitLocker Recently, our teams in Latin America investigated a series of incidents involving misc... 2026-7-21 13:0:29 | 阅读: 7 | 收藏 | Securelist - securelist.com attackers bitlocker rmm security monitoring

New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery IntroductionIn June 2026, as part of our Kaspersky Threat Intelligence Reporting serv... 2026-7-21 08:40:47 | 阅读: 4 | 收藏 | Securelist - securelist.com microsoft aaaa tenantid 2026

HelloNet campaign — new malicious modules launched through the ViPNet update system UPD 16.07.2026: Added detection of the malicious activity using Kaspersky Managed Dete... 2026-7-16 13:5:56 | 阅读: 16 | 收藏 | Securelist - securelist.com vipnet malicious infotecs attackers loader

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration IntroductionIn February 2026 we discovered a set of malicious activities that have be... 2026-7-16 12:0:27 | 阅读: 15 | 收藏 | Securelist - securelist.com goserpent stowaway tmcloader proxy

OkoBot: new sophisticated malware framework targets cryptocurrency users IntroductionIn January 2026, we identified multiple attacks involving unknown malware... 2026-7-15 10:0:26 | 阅读: 15 | 收藏 | Securelist - securelist.com malicious ssh tookps payload hwid

Threat landscape for industrial automation systems. Q1 2026 All threatsThe percentage of ICS computers on which malicious objects were blocked co... 2026-7-7 10:0:11 | 阅读: 21 | 收藏 | Securelist - securelist.com industries regions pp threats percentages

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website One of the most common pieces of anti-phishing advice is to double-check the website’s... 2026-7-6 09:0:43 | 阅读: 28 | 收藏 | Securelist - securelist.com phishing microsoft victim

Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign IntroductionDuring our routine threat monitoring, we uncovered a new phishing campaig... 2026-7-3 10:0:33 | 阅读: 37 | 收藏 | Securelist - securelist.com stealer c2 busysnake loader client

Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects The following analysis presents the key findings from Kaspersky Compromise Assessment... 2026-7-2 09:0:9 | 阅读: 19 | 收藏 | Securelist - securelist.com security analysis monitoring remote network

The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign IntroductionTo access compromised systems, threat actors frequently abuse legitimate... 2026-7-1 10:0:51 | 阅读: 17 | 收藏 | Securelist - securelist.com obs download malicious software

ToddyCat: your hidden email assistant. Part 2 IntroductionWe continue to share details on the malicious techniques and toolsets use... 2026-6-30 10:0:13 | 阅读: 35 | 收藏 | Securelist - securelist.com umbrij microsoft chrome remote googleapis

The Gentlemen are knocking: сustom backdoors and evolving tactics IntroductionThis year saw the emergence of The Gentlemen, a prominent example of a gr... 2026-6-29 10:0:35 | 阅读: 18 | 收藏 | Securelist - securelist.com ransomware windows encryption gentlemen locker

Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk About the vulnerabilityThe CVE-2024-2658 vulnerability was discovered in 2024 within... 2026-6-26 13:0:14 | 阅读: 14 | 收藏 | Securelist - securelist.com lmadmin flexnet electric schneider publisher

Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools Small and medium-sized businesses (SMBs) remain attractive targets for cybercriminals... 2026-6-25 10:0:59 | 阅读: 24 | 收藏 | Securelist - securelist.com 2026 smbs attackers security sized

StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader IntroductionDuring our research of activity affecting a diplomatic organization in In... 2026-6-24 10:0:3 | 阅读: 24 | 收藏 | Securelist - securelist.com sharkloader beacon loader memory

A VBScript campaign distributed through WhatsApp deploying RMM software In June 2026, we observed a malware campaign distributing malicious VBScript files thr... 2026-6-22 10:0:38 | 阅读: 34 | 收藏 | Securelist - securelist.com vbscript stage windows debt analysis

Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk Since late 2025, malware has been spreading rapidly through the Steam Workshop, the ga... 2026-6-16 09:0:11 | 阅读: 34 | 收藏 | Securelist - securelist.com wallpaper filedetails sharedfiles wallpapers

From cause to cash: a cross-border look at hacktivist activity While tracking the activities of 4BID we uncovered a new string of campaigns that appe... 2026-6-8 08:0:36 | 阅读: 10 | 收藏 | Securelist - securelist.com attackers sfx processes locker c2

Argamal: Malware hidden in hentai games In April 2026, we discovered a new malware campaign targeting players of “hentai” game... 2026-6-3 09:0:22 | 阅读: 52 | 收藏 | Securelist - securelist.com c2 payload trojan malicious 186

Wardriving assessment across Mexico: Preparing for the 2026 World Cup IntroductionMexico is one of the host countries for the 2026 FIFA World Cup, with mat... 2026-6-2 12:0:33 | 阅读: 39 | 收藏 | Securelist - securelist.com deployments ssid analysis wps security