Attackers exploiting a patched FortiClient EMS vulnerability in the wild
Kaspersky’s GERT experts describe an incident with initial access to enterprise infrastructures through a FortiClient EMS vulnerability that allowed SQL injections.
SOC, TI and IR posts
- APT reports
- Archive
- Crimeware reports
- DDoS reports
- Events
- Incidents
- Industrial threats
- Internal threats reports
- Kaspersky Security Bulletin
- Malware descriptions
- Malware reports
- Opinion
- Publications
- Research
- SAS
- Security technologies
- SOC, TI and IR posts
- Software
- Spam and phishing
- Spam and phishing reports
SOC, TI and IR posts
SOC, TI and IR posts
- APT reports
- Archive
- Crimeware reports
- DDoS reports
- Events
- Incidents
- Industrial threats
- Internal threats reports
- Kaspersky Security Bulletin
- Malware descriptions
- Malware reports
- Opinion
- Publications
- Research
- SAS
- Security technologies
- SOC, TI and IR posts
- Software
- Spam and phishing
- Spam and phishing reports
Subscribe
Reports
BellaCPP: Discovering a new BellaCiao variant written in C++
While investigating an incident involving the BellaCiao .NET malware, Kaspersky researchers discovered a C++ version they dubbed “BellaCPP”.
Lazarus group evolves its infection chain with old and new malware
Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.
Careto is back: what’s new after 10 years of silence?
Kaspersky researchers analyze 2019, 2022 and 2024 attacks attributed to Careto APT with medium to high confidence.
APT trends report Q3 2024
The report features the most significant developments relating to APT groups in Q3 2024, including hacktivist activity, new APT tools and campaigns.
Subscribe to our weekly e-mails
The hottest research right in your inbox
