EUVD-2007-3486

Malware in sbrugna...

EUVD-2020-17736

Malware in sbrugna...

EUVD-2016-5305

Malware in sbrugna...

EUVD-2018-18052

Malware in sbrugna...

EUVD-2019-6625

Malware in sbrugna...

EUVD-2017-4360

Malware in sbrugna...

EUVD-2018-18067

Malware in sbrugna...

EUVD-2018-18051

Malware in sbrugna...

EUVD-2003-1433

Malware in sbrugna...

EUVD-2020-18825

Malware in sbrugna...

EUVD-2008-1519

Malware in sbrugna...

EUVD-2007-3890

Malware in sbrugna...

EUVD-2017-18725

Malware in sbrugna...

Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

EUVD-2023-27449

Malicious code in bioql PyPI...

EUVD-2024-51693

Malicious code in bioql PyPI...

EUVD-2024-17359

Malicious code in bioql PyPI...

EUVD-2022-32035

Malicious code in bioql PyPI...

EUVD-2022-32036

Malicious code in bioql PyPI...

Driver of destruction: How a legitimate driver is being used to take down AV processes

Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...