Necro Android Malware Found in Popular Camera and Browser Apps on Play Store

September 24, 2024 at 12:42PM Altered versions of popular Android apps linked to Spotify, WhatsApp, and Minecraft have been distributing a new iteration of Necro, a known malware loader, with some of these apps even present on the Google Play Store. This sophisticated malware is designed to carry out various malicious activities on infected devices, … Read more

Kaspersky Exits U.S., Automatically Replaces Software With UltraAV, Raising Concerns

September 24, 2024 at 09:00AM Kaspersky has started withdrawing its offerings in the U.S., transitioning users to UltraAV before its formal exit at the end of September. While the company ensured a seamless transition to maintain protection, some users reported unexpected automatic deletion of Kaspersky’s software. UltraAV claimed to have communicated the transition process to … Read more

Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus

September 24, 2024 at 07:06AM Windows users in the US are frustrated by the abrupt switch from Kaspersky to UltraAV antivirus, following Kaspersky’s ban over Russian government ties. Users express discontent over the unexpected transition, difficulty removing UltraAV, and suspicions of its control over their devices. Expert opinions highlight concerns over security and transparency in … Read more

Some US Kaspersky customers find their security software replaced by ‘UltraAV’

September 23, 2024 at 09:09PM Kaspersky’s US customers are experiencing an unexpected software replacement by “UltraAV” due to a US government ban on Kaspersky products. UltraAV, a low-profile entity, raises concerns about its unknown and untested software amid its close ties with Boston-based Pango. With Kaspersky ceasing operations in the US, users must choose to … Read more

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

September 23, 2024 at 05:00PM Kaspersky withdrew its anti-malware software from US customers’ devices due to a ban from the US Department of Commerce. The company partnered with UltraAV to automatically replace the lost software. Users expressed skepticism and trust issues with UltraAV, with some planning to switch to other providers. Kaspersky claims to have … Read more

Kaspersky deletes itself, installs UltraAV antivirus without warning

September 23, 2024 at 01:20PM Kaspersky, facing U.S. government restrictions, abruptly replaced its antivirus with UltraAV on customers’ computers in the U.S. without prior notification. This led to concerns about potential malware infections and difficulty in uninstalling UltraAV. Kaspersky employees and UltraAV assured customers of continued protection, but some remain skeptical. After analyzing the meeting … Read more

RansomHub ransomware abuses Kaspersky TDSSKiller to disable EDR software

September 10, 2024 at 02:31PM The RansomHub ransomware gang has utilized TDSSKiller, a legitimate tool from Kaspersky, to neutralize endpoint detection and response (EDR) services on target systems. Based on the meeting notes, it appears that the RansomHub ransomware gang has been utilizing TDSSKiller, a legitimate tool from Kaspersky, to bypass endpoint detection and response … Read more

One Million US Kaspersky Customers Transferred to Pango’s UltraAV

September 9, 2024 at 06:28AM Kaspersky’s US customers are being transferred to Pango’s UltraAV after the company was banned from offering its software in the US. The move follows Kaspersky’s decision to wind down US operations. The deal will see approximately 1 million new users transferred to UltraAV, offering features similar to Kaspersky’s product, with … Read more

New CMoon USB worm targets Russians in data theft attacks

August 7, 2024 at 05:30PM The ‘CMoon’ self-spreading worm, discovered by Kaspersky researchers, targets high-value entities in Russia via a compromised gas supply company website. It employs malicious document links to distribute itself and exhibits various functionalities such as info-stealing, DDoS attacks, and self-propagation. Kaspersky advises vigilance due to its potential for further distribution. Based … Read more

Android spyware ‘Mandrake’ hidden in apps on Google Play since 2022

July 29, 2024 at 06:29PM A new variant of the Android spyware ‘Mandrake’ was discovered in five Google Play apps downloaded 32,000 times. Kaspersky found the updated version with enhanced obfuscation and evasion, entering through these apps. The spyware operates stealthily, prompting users to install further malicious APKs. Android users are urged to be cautious … Read more