1864 matches found
EUVD-2016-5305
Malware in sbrugna...
EUVD-2021-21697
Malware in sbrugna...
EUVD-2009-0453
Malware in sbrugna...
EUVD-2019-6626
Malware in sbrugna...
EUVD-2018-18067
Malware in sbrugna...
EUVD-2020-17737
Malware in sbrugna...
EUVD-2019-6625
Malware in sbrugna...
EUVD-2020-17738
Malware in sbrugna...
Detecting DLL hijacking with machine learning: real-world cases
Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...
EUVD-2023-27449
Malicious code in bioql PyPI...
EUVD-2022-32035
Malicious code in bioql PyPI...
EUVD-2022-32036
Malicious code in bioql PyPI...
EUVD-2024-17359
Malicious code in bioql PyPI...
EUVD-2024-51693
Malicious code in bioql PyPI...
Driver of destruction: How a legitimate driver is being used to take down AV processes
Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...
Cobalt Strike Beacon delivered via GitHub and social media
Introduction In the latter half of 2024, the Russian IT industry, alongside a number of entities in other countries, experienced a notable cyberattack. The attackers employed a range of malicious techniques to trick security systems and remain undetected. To bypass detection, they delivered...
ToolShell: a story of five vulnerabilities in Microsoft SharePoint
On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not require authentication, allowed attackers to gain full control over the infected servers, and were...
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Non-mobile statistics IT threat evolution in Q1 2025. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...
CVE-2024-1619
Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...
CVE-2023-23349
Kaspersky has fixed a security issue in Kaspersky Password Manager KPM for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form o...