Kaspersky describió un framework de carga de assemblies.NET que no estaba documentado, entregado en una cadena multi-etapa de payloads codificados, comprimidos o cifrados en capas —archivos XAML, assemblies.NET y JSON—, con una etapa final que consulta un C2 y ejecuta el XAML que baja en…

NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code

NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code

NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code

NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code

NetamLoader malware exploited Windows Update directories in a custom government Windows 10 build, highlighting challenges in detecting supply chain attacks.

NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank warns of security breach https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/ Russian home goods chain Poryadok suffers cyberattack https://therecord.media/russian-home-goods-chain-faces-disruptions Android SMS of Death zero-click warning https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/ Data of more than 41,000 homeland security workers leaked https://www.theguardian.com/us-news/2026/oct/28/homeland-security-data-leak Fashion retailer Revolve suffers data theft https://therecord.media/resolve-fashion-retailer-data-breach-payment-cards British spy agency cannot account for thousands of data storage devices https://therecord.media/gchq-cannot-account-for-thousands-of-data-devices UK landline phones to be disconnected in two months https://www.theregister.com/networks/2026/11/01/landline-phones-will-switch-off-across-britland-in-100-days-no-extensions-openreach/5306673 Get the show notes here: https://cisoseries.com/cybersecurity-news-november-2-2026/ Huge thanks to our episode sponsor, ESET Managed detection and response used to be built for big enterprises with big budgets. Not anymore. ESET is bringing effortless cybersecurity as a service to businesses of every size, with twenty-four-seven monitoring, automated threat containment, and real experts behind it, all without the overhead. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code

arbitrary payloads read more about NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed

A new malware framework, NetamLoader, is targeting government entities in Asia using a sophisticated AppDomainManager injection technique, likely delivered...

Kaspersky has exposed NetamLoader, a stealth .NET loader found on a government-only Windows 10 build in Asia, hiding code inside legitimate patching tools.

Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed

Introduction: A Targeted Malware Operation Raises Concerns Over Government Infrastructure A newly disclosed malware operation targeting a government-use Windows 10 environment in Asia has drawn attention from cybersecurity researchers after Kaspersky identified activity involving a previously investigated threat known as NetamLoader. According to information reported by Cybersecurity News Everyday (@TweetThreatNews) on November 1, 2026, Kaspersky's telemetry identified one victim associated with the activity.

Kaspersky disclosed NetamLoader activity targeting a government-use Windows 10 build in Asia. Telemetry identified one victim; the delivery method and any…

15 curated cybersecurity & geopolitical intel stories. Nation-state ops, threat intel, policy & vulnerabilities.

NetamLoader se escondió en un paquete de actualización y apagó el antivirus de un Windows 10 hecho solo para gobiernos de Asia.

Haz clic para acceder al contenido completo.