Kaspersky's 2025 compromise assessments found intrusions missed for months or years, with some dating back four years. Web shells, LoLBins, and remote tools kept recurring. #NSABuffMiner #PurpleFox #Impacket
Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
Kaspersky’s 2025 compromise assessments show that many serious intrusions went undetected for months or even years, with the oldest missed incident dating back four years. The report highlights recurring abuse of web shells, LoLBins, remote management tools, and named campaigns and actors such as NSABuffMiner, PurpleFox, LionTail, Scarred Manticore, Impacket, Cobalt Strike, Mimikatz, and ClipBanker. #NSABuffMiner #PurpleFox #LionTail #ScarredManticore #Impacket #CobaltStrike #Mimikatz #ClipBanker
www.hendryadrian.com
July 2, 2026 at 6:00 PM
Kaspersky's 2025 compromise assessments found intrusions missed for months or years, with some dating back four years. Web shells, LoLBins, and remote tools kept recurring. #NSABuffMiner #PurpleFox #Impacket
~Kaspersky~
30.8% of incidents persisted over 3 months; 52% of high-severity compromises went undetected for 90+ days.
-
IOCs: NSABuffMiner, LionTail, PurpleFox
-
#CompromiseAssessment #IncidentResponse #ThreatIntel
30.8% of incidents persisted over 3 months; 52% of high-severity compromises went undetected for 90+ days.
-
IOCs: NSABuffMiner, LionTail, PurpleFox
-
#CompromiseAssessment #IncidentResponse #ThreatIntel
Compromise Assessment Findings 2025
securelist.com
July 2, 2026 at 12:47 PM
~Kaspersky~
30.8% of incidents persisted over 3 months; 52% of high-severity compromises went undetected for 90+ days.
-
IOCs: NSABuffMiner, LionTail, PurpleFox
-
#CompromiseAssessment #IncidentResponse #ThreatIntel
30.8% of incidents persisted over 3 months; 52% of high-severity compromises went undetected for 90+ days.
-
IOCs: NSABuffMiner, LionTail, PurpleFox
-
#CompromiseAssessment #IncidentResponse #ThreatIntel