Organization
12 Interestana reports mention Kaspersky, newest first. Each is summarised from the original reporting and links back to its publisher.
Enterprises operating within the Russian Federation have become the primary targets of three distinct threat activity clusters, meticulously identified and reported on by the prominent cybersecurity firm Kaspersky. These clusters, designated as NightEagle, Hacking Cat, and Toy Ghouls, are collectively…
The Iranian hacking group Nimbus Manticore has been identified by Russian cybersecurity firm Kaspersky as the perpetrator behind two new malware families. These families represent a significant evolution in the group's capabilities, particularly in their ability to develop cross-platform remote…
The sophisticated ValleyRAT backdoor is being distributed by a threat actor identified as Silver Fox, employing a novel tactic that leverages user trust in legitimate software and antivirus exclusion lists.
Cybersecurity researchers have identified a novel malware family specifically engineered to compromise the firmware of Android-based vehicle head units developed by DoFun. Kaspersky, the cybersecurity firm that uncovered this threat in June 2026, detailed that the malware's ultimate objective is…
Cybersecurity researchers have identified new tactics employed by the Cavern command-and-control (C2) framework, utilized by Iranian nation-state actors in attacks targeting Israeli entities. Kaspersky, a Russian cybersecurity firm, reported in December 2025 that its continuous monitoring of this threat activity…
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers, once again targeting Russian companies across multiple critical sectors. Kaspersky, a Russian cybersecurity vendor, detected these attacks in July 2026.
Kaspersky announced the discovery of a novel malware framework designed to target cryptocurrency investors on March 12, 2024. The cybersecurity firm detailed how this framework employs sophisticated social engineering tactics to lure victims into compromising their digital assets.
Kaspersky researchers identified a new malware, GoSerpent, which has been actively used in cyberattacks targeting government and diplomatic entities in Southeast Asia since late 2025. The discovery was made by Kaspersky's Global Research and Analysis Team in February 2026.
A previously undocumented threat actor, identified as Armored Likho, has been linked to cyber attacks targeting government agencies and the electric power sector in Russia, Brazil, and Kazakhstan. Kaspersky researchers published a technical analysis today detailing the group's activities.
The threat actor group ToddyCat has been linked to a newly identified malware strain named Umbrij, which is engineered to gain unauthorized access to victims' email communications. This malware specifically targets corporate email accounts hosted on Gmail by exploiting…
Unknown threat actors are leveraging the ScreenConnect remote access tool to deploy and execute AsyncRAT. Kaspersky reported this activity is part of a "massive, multi-domain, multi-language" campaign that distributes malicious installer archives hosted on spoofed websites.
A new malware family named SharkLoader has been identified as the primary loader for deploying Cobalt Strike Beacon in a recently observed cyberattack campaign. Cybersecurity firm Kaspersky is tracking this activity under the designation StrikeShark.