Onderzoekers van Securelist hebben in september 2026 een nieuwe, meer geavanceerde distributieketen ontdekt voor MacSync, een infostealer die gericht is op macOS-gebruikers. De malware richt zich specifiek op gebruikers van cryptovaluta en ontwikkelaarstools. De distributieketen begint nu met schadelijke schijfkopiebestanden (DMG's) die zich voordoen als legitieme applicaties. Deze DMG's bevatten een applicatiebundel en zijn een significante verandering ten opzichte van eerdere methoden die voornamelijk vertrouwden op het plakken van Terminal-commando's. Slachtoffers kunnen de malware tegenkomen via valse of gekraakte software, zoals een fictieve crypto-portemonnee-applicatie genaamd Toria,...

Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the malicious installer to the final payload.

Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objec...

The report contains statistics on various threats detected and blocked on ICS computers in Q3 2025, including miners, ransomware, spyware, etc.

Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

Analysis of CVE-2024-2658 as found in Schneider Electric's Floating License Manager. Discover how this FlexNet Publisher vulnerability potentially allows attackers to escalate to NT AUTHORITY\SYSTEM p...

In this report, Kaspersky experts share their insights into the 2025 financial threat landscape, including regional statistics and trends in phishing, PC malware, and infostealers.

At a Glance Attribute Details Malware Family MovieReaper Threat Actor Unknown cybercriminals Target Victims Hundreds of organizations and individuals globally Delivery Vector Compromised itorrents.org repository serving fake movie files Key Capabilities Solana blockchain C2, UAC bypass, remote file management Source Kaspersky Labs (Securelist) Executive Summary The newly discovered MovieReaper malware infects victims downloading pirated films via compromised torrent files. After execution, this modular framework gives attackers complete remote file-management capabilities over infected systems.

Kaspersky experts share insights into how AmCache may prove useful during incident investigation, and provide a command line tool to extract data from this artifact.

Kaspersky researchers are sharing insights into the main ransomware trends for 2026: EDR killers on the rise, switching from data encryption to data leaks, and more.

* New Mandrake Spyware Found in Google Play Store Apps After Two Years  The Hacker News * New Mandrake Android spyware version discovered on Google Play  Securelist * Mysterious family of malware hid in Google Play for years  Ars Technica * Android…

Kaspersky GReAT experts uncover malicious extensions for Cursor AI that download the Quasar backdoor and a crypto stealer.

Abandonner les rançongiciels clés en main du darknet pour concevoir leur propre arme : le groupe Toy Ghouls déploie GenieLocker sur Windows, Linux et VMware ESXi. Un binaire furtif qui masque ses traces en supprimant les notes de rançon automatiques. Analyse. Les chercheurs de l'équipe Securelist chez Kaspersky viennent de détailler le fonctionnement de GenieLocker,...

Researchers at Securelist discovered a new type of Android malware that infects car infotainment systems without any user interaction using the built-in updater.

📰 Source : Securelist (Kaspersky) — Publication le 17 septembre 2026, auteurs : Konstantin Isakov et Pavel Cheremushkin. 🎯 Contexte Depuis mi-août 2026, Kaspersky a identifié une campagne de distribution massive de malware déguisé en films populaires via des trackers torrent. L'activité de l'acteur remonte à octobre 2025.

Kaspersky GReAT experts discovered previously undocumented infection chains used in the Notepad++ supply chain attacks. The article provides new IoCs related to those incidents which employ DLL sidelo...

Kaspersky Labは7月29日(現地時間)、「New Mandrake Android spyware version discovered on Google Play｜Securelist」において、Google Playより配布された複数のアプリからマルウェア「Mandrake」の亜種を発見し