Collaborate Disseminate
Kaspersky researchers discuss infection methods used by Mirai-based RapperBot, Rhadamantys stealer, and CUEMiner: smart brute forcing, malvertising, and distribution through BitTorrent and OneDrive. Continue reading Uncommon infection methods—part 2
Kaspersky observes a growth in malvertising activity that exploits Google search ads to promote fake software websites that deliver stealers, such as RedLine and Rhadamantys. Continue reading Malvertising through search engines
This report assesses how accurately we predicted the developments in the financial threats landscape in 2022 and ponder at what to expect in 2023. Continue reading Crimeware and financial cyberthreats in 2023
NullMixer is a dropper delivering a number of Trojans, such as RedLine Stealer, SmokeLoader, Satacom, and others. Continue reading NullMixer: oodles of Trojans in a single dropper
Mass spam mailing posing as customer email delivers the Agent Tesla stealer disguised as a document to corporate users. Continue reading Mass email campaign with a pinch of targeted spam
A malicious bundle containing the RedLine stealer and a miner is distributed on YouTube through cheats and cracks ads for popular games. Continue reading Self-spreading stealer attacks gamers via YouTube
In this report, we analyze malware, potentially unwanted applications and phishing cases related to most popular video games and cheats for these games. Continue reading Good game, well played: an overview of gaming-related cyberthreats in 2022
In this report, you will find statistics and other information about gaming-related malware, phishing schemes and other threats in 2020 and the first half of 2021. Continue reading Gaming-related cyberthreats in 2020 and 2021
In 2019, Kaspersky mobile products and technologies detected 3,503,952 malicious installation packages, 69,777 new mobile banking Trojans and 68,362 new mobile ransomware Trojans. Continue reading Mobile malware evolution 2019
We discovered what appears to be one of AZORult’s most unusual campaigns: abusing the ProtonVPN service and dropping malware via fake ProtonVPN installers for Windows. Continue reading AZORult spreads as a fake ProtonVPN installer