Over the past year, BO Team has significantly recalibrated its approach to incursions against Russian organizations. The syndicate has transitioned away from the boisterous profile of hacktivists intent on performative infrastructure sabotage, increasingly manifesting...
A clandestine Android dropper, masquerading as a mundane PDF reader, has once again infiltrated the Google Play Store. While the application appeared to function as advertised—seamlessly opening documents without initially arousing suspicion—it harbored the...
The routine acquisition of CPU-Z or HWMonitor has abruptly transformed into a vector for trojan distribution. Researchers from Cyderes, Breakglass, and Kaspersky report that adversaries compromised the official links on the CPUID website, diverting...
Kaspersky Lab has categorically repudiated the hypothesis that the iPhone exploit framework, recently delineated by Google, was engineered by the same architects responsible for the vulnerability chains weaponized in the “Operation Triangulation” campaign of...
Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level. Researchers have observed the deployment of an advanced version of the ToneShell malware, concealed by a...
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out one of the most sophisticated and long-running cyber campaigns of recent years, silently infecting victim systems...
Researchers at Kaspersky Lab have published an in-depth study on how to detect the presence of Mythic within corporate networks—one of the most widely used tools employed by attackers to manage compromised systems. Mythic...
The Tomiris group launched a new wave of cyber-espionage in early 2025, targeting high-level political and diplomatic institutions. According to Kaspersky Lab, the attacks focused on ministries of foreign affairs, state agencies, and intergovernmental...
Unwanted programs disguised as gaming software have once again drawn the attention of cybersecurity researchers. The Tsundere botnet, which surfaced this past summer, has been steadily expanding its reach, targeting Windows users through an...
Hacktivists typically move from words to action within a matter of days or weeks after issuing their public threats. This conclusion was drawn by the Kaspersky Lab research team, which analyzed the activities of...
Kaspersky Lab has published its first comprehensive technical analysis of cyber groups most actively targeting Russian organizations. The report details 14 groups, outlining their tactics, tools, and the confirmed links between them. Experts identified...
Researchers at Kaspersky Lab have reported the resurgence of ransomware operations by the group OldGremlin, which has once again begun targeting Russian companies. In the first half of 2025, eight major enterprises were compromised,...
