Threat Category: Windows malware | Page 22

What wonderful times we live in! Thanks to the development of the Internet, we can purchase things and pay for services quickly and easily. Things have become incredibly convenient.

Brazilian cybercriminals using proxy-auto-config feature to rediret users to malicious servers

Last Friday, Kaspersky Lab’s experts detected a new variant of Sality.aa, which is at present the most popular polymorphic virus. Within the last two years this virus has remained one of the TOP-5 malicious programs.

2009 was the latest milestone both in the history of malware and in the history of cybercrime, with a marked change in direction in both areas. This year laid the foundation of what we will see in the future.

The first Top Twenty lists malicious programs, adware and potentially unwanted programs that were detected and neutralized when accessed for the first time, i.e. by the on-access scanner.

Friday 13th! If you’re at all superstitious, today is bad news. But for those of us in the antivirus industry, Friday 13th is a special day.

Kaspersky Lab presents its monthly malware statistics for October. From this month onwards, the data used is gathered from all products which use the Kaspersky Security Network (KSN), i.e. products from both the 2009 and 2010 lines.

As expected, we can confirm more compromised machines. Our current count looks as follows

Around October 20th we received mails from our office in Turkey about the “possible spread of a new virus”

After a lengthy interlude, we’re renewing our monthly malware almanac by popular demand.

Kaspersky Lab presents its monthly malware statistics for September

Kaspersky Lab presents its monthly malware statistics for August

There’s been a lot of fuss in the media lately, with news from all the major antivirus companies being printed and reprinted. The source of all the fuss? Virus.Win32.Induc.a.

We recently added detection for a file infector to our databases, for something we call Virus.Win32.Induc.a. Since then, we’ve had a load of questions about it.

Malware (which we detect as Trojan-Banker.Win32.Banker.alwa and Trojan-Banker.Win32.Banker.alwe) was using Twitter as a control system to command infected machines.

Reports

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Kaspersky researchers uncovered malicious wheel packages in PyPI that targeted both Windows and Linux and contained a dropper delivering malware dubbed ZiChatBot. We attribute this activity to OceanLotus APT.

Windows malware

ZeuS on the Hunt

Benign Feature, Malicious Use

A new version of Sality at large

Kaspersky Security Bulletin 2009. Malware Evolution 2009

Monthly Malware Statistics: December 2009

Happy Friday 13th!

Monthly Malware Statistics: October 2009

Gumblar update

The new gumblar

Malware Miscellany, September 2009

Monthly Malware Statistics: September 2009

Monthly Malware Statistics: August 2009

A short history of Induc

Induc, the innovative file infector

Not just Twitter, Jaiku too

Reports

ToddyCat: your hidden email assistant. Part 2

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Kimsuky targets organizations with PebbleDash-based tools

OceanLotus suspected of using PyPI to deliver ZiChatBot malware

Subscribe to our weekly e-mails