Securelist by Kaspersky

ID: 7acde381-77f7-5839-9aa3-97396d60a4fa

STIX ID: identity--7acde381-77f7-5839-9aa3-97396d60a4fa

Feed Type: rss

Earliest post: 2023-12-12

Latest post: 2026-09-24

Threat research, malware & APT analyses, and cyber-crime reports from experts — providing data-driven insight on emerging threats, ransomware, phishing, and targeted attacks worldwide.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

10/14/2026

Title	Date Published ↓	Threat Score	Author	Visible
MacSync under the microscope: new delivery methods and a new payload	2026-09-24	80	Sergey Puzan	True
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO	2026-09-21	78	Ahmad Zaidi Said, Elsayed Elrefaei, Kaspersky Security Services	True
The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents	2026-09-17	78	Konstantin Isakov, Pavel Cheremushkin	True
NightEagle targets Russian companies	2026-09-16	85	Stanislav Larinsky, Kaspersky Security Services	True
Angry Birds: Toy Ghouls’ new toys	2026-09-04	78	Kaspersky GERT, Kaspersky Security Services	True
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set	2026-09-01	85	Omar Amin	True
ValleyRAT masquerading as adware	2026-08-31	80	Pavel Bukhtenko	True
Threat landscape for industrial automation systems. Q2 2026	2026-08-27	30	Kaspersky ICS CERT	True
Exploits and vulnerabilities in Q2 2026	2026-08-26	85	Alexander Kolesnikov	True
The invisible passenger in your car	2026-08-21	75	Dmitry Kalinin	True
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit	2026-08-14	88	Fareed Radzi	True
Armored Likho expands its cyber-espionage toolkit	2026-08-13	80	Konstantin Isakov	True
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants	2026-08-11	88	Kaspersky	True
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection	2026-08-11	85	GReAT	True
IT threat evolution in Q2 2026. Non-mobile statistics	2026-08-10	78	AMR	True
IT threat evolution in Q2 2026. Mobile statistics	2026-08-10	70	Anton Kivva	True
How legitimate cloud platforms enable phishers to bypass MFA	2026-08-04	78	Olga Altukhova	True
An analysis of incidents at Brazilian educational institutions	2026-08-03	70	Cristian Souza	True
Network Anomaly Detection in KATA	2026-07-31	55	Arseny Vesnovsky, Valery Akulenko, Dmitry Sabadash	True
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia	2026-07-30	88	Saurabh Sharma, Yaroslav Kikel	True
Toy Ghouls’ new toy: the GenieLocker ransomware	2026-07-30	78	Fedor Sinitsyn, Yanis Zinchenko	True
Mirage Kitten targets Middle East and Africa region with new malware	2026-07-28	88	Omar Amin, Vasily Berdnikov	True
A new extortion cocktail: office printers, small ransoms, and BitLocker	2026-07-21	75	Eduardo Ovalle	True
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery	2026-07-21	78	GReAT	True
HelloNet campaign — new malicious modules launched through the ViPNet update system	2026-07-16	85	Konstantin Isakov, Georgy Kucherin, Anton Kargin	True
GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration	2026-07-16	88	Noushin Shabab	True
OkoBot: new sophisticated malware framework targets cryptocurrency users	2026-07-15	75	Yaroslav Kikel	True
Threat landscape for industrial automation systems. Q1 2026	2026-07-07	60	Kaspersky ICS CERT	True
When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website	2026-07-06	70	Roman Dedenok	True
Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign	2026-07-03	82	Kaspersky	True
Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects	2026-07-02	78	Victor Sergeev, Amged Wageh	True
The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign	2026-07-01	75	Denis Kulik	True
OpenClaw: risks for the users and how to mitigate them	2026-07-01	75	Kaspersky	True
ToddyCat: your hidden email assistant. Part 2	2026-06-30	85	Andrey Gunkin	True
The Gentlemen are knocking: сustom backdoors and evolving tactics	2026-06-29	78	Fatih Şensoy, Maher Yamout	True
Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk	2026-06-26	70	Valery Akulenko	True
Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools	2026-06-25	70	Vasily Kolesnikov, Olga Altukhova, Anna Lazaricheva, Ekaterina Beloborodova	True
StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader	2026-06-24	80	Fareed Radzi	True
A VBScript campaign distributed through WhatsApp deploying RMM software	2026-06-22	72	Fareed Radzi	True
Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk	2026-06-16	75	Maxim Starodubov, Denis Brylev	True
From cause to cash: a cross-border look at hacktivist activity	2026-06-08	80	Kaspersky	True
Argamal: Malware hidden in hentai games	2026-06-03	75	Mikhail Reznichenko	True
Containers on fire: from container escapes to supply chain attacks	2026-06-01	78	Alexander Chudnov	True
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant	2026-05-29	75	Yaroslav Shmelev, Anton Kivva, Denis Parinov, Vladimir Kuskov, Yanina Balandyuk-Opalinskaya	True
Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years	2026-05-28	76	Konstantin Krasilnikov, Valery Akulenko, Artem Snegirev	True
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload	2026-05-22	90	Kaspersky	True
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)	2026-05-20	65	Lucas Tay	True
IT threat evolution in Q1 2026. Mobile statistics	2026-05-18	75	Anton Kivva	True
IT threat evolution in Q1 2026. Non-mobile statistics	2026-05-18	82	AMR	True
Kimsuky targets organizations with PebbleDash-based tools	2026-05-14	88	Sojun Ryu	True