Securelist

MontysThree: Industrial espionage with steganography and a Russian accent on both sides

Oct 8, 2020, 10:00 am

In summer 2020 we uncovered a previously unknown multi-module C++ toolset used in highly targeted industrial espionage attacks dating back to 2018. The malware authors named the toolset “MT3”; following this abbreviation we have named the toolset “MontysThree”. Read Full Article

APT reports

MosaicRegressor: Lurking in the Shadows of UEFI

Oct 5, 2020, 10:00 am

Mark Lechtik, Igor Kuznetsov, Yury Parshin

We found a compromised UEFI firmware image that contained a malicious implant. To the best of our knowledge, this is the second known public case where malicious UEFI firmware in use by a threat actor was found in the wild. Read Full Article

Events

SAS@Home is back this fall

Sep 30, 2020, 3:15 pm

Kaspersky

Now, this unique year presents us with a new surprise: the second SAS in one calendar year! Once again, everyone can visit this online event. Read Full Article

Events

Why master YARA: from routine to extreme threat hunting cases. Follow-up

Sep 29, 2020, 2:00 pm

GReAT

On 3rd of September, we were hosting our webinar, in which we shared best practices on YARA usage. Due to timing restrictions we were not able to answer all the questions, therefore we’re trying to answer them here. Read Full Article

Industrial threats

Threat landscape for industrial automation systems. H1 2020 highlights

Sep 24, 2020, 8:00 am

Kaspersky Lab ICS CERT

Beginning in H2 2019 we have observed a tendency for decreases in the percentages of attacked computers, both in the ICS and in the corporate and personal environments. The internet, removable media and email continue to be the main sources of threats in the ICS environment. Read Full Article

Research

Looking for sophisticated malware in IoT devices

Sep 23, 2020, 10:00 am

Noushin Shabab

Let’s talk about the structure of the firmware of an IoT device in order to get a better understanding of the different components. Read Full Article

Publications

An overview of targeted attacks and APTs on Linux

Sep 10, 2020, 10:00 am

GReAT

The Global Research and Analysis Team (GReAT) at Kaspersky publishes regular summaries of advanced persistent threat (APT) activity, based on the threat intelligence research discussed in greater detail in our private APT reports. In this report, we focus on the targeting of Linux resources by APT threat actors. Read Full Article

Publications

Digital Education: The cyberrisks of the online classroom

Sep 4, 2020, 10:00 am

Kaspersky

This past spring, as the COVID-19 pandemic took hold, online learning became the new norm as universities and classrooms around the world were forced to close their doors. By April 29, 2020, more than 1.2 billion children across 186 countries… Read Full Article

Malware reports

IT threat evolution Q2 2020. Mobile statistics

Sep 3, 2020, 11:00 am

Victor Chebyshev

According to Kaspersky Security Network, during the second quarter 1,245,894 malicious installers were detected and a total of 14,204,345 attacks on mobile devices were blocked. Read Full Article