Tag

Kaspersky

3 stories

Russian police arrest VasyGrek suspects and seize criminal equipment

Russian authorities have arrested three suspected members of the threat group known as VasyGrek and dismantled its criminal infrastructure. The group is also known as Fluffy Wolf and has targeted Russian and international companies since 2016. The Ministry of Internal Affairs of the Russian Federation, or MVD, says the suspects are believed to have stolen money from organizational accounts and created, distributed, and used malicious software. In one September 2025…

Saugata DattaNov 4, 20263 min read107

Microsoft

NetamLoader: .NET Injection Attack Hits Government Windows 10 Build in Asia

Cybersecurity researchers have disclosed a sophisticated multi-stage intrusion that targeted a government-only Windows 10 build in Asia using a previously undocumented .NET assembly-loading framework dubbed NetamLoader. Kaspersky researchers who investigated the artifact say the sample was discovered in the first half of 2026 and was packaged inside a Windows cabinet (CAB) archive placed in a directory normally used for Windows update packages. The operation appears to have used AppDomainManager injection…

Saugata DattaNov 1, 20264 min read167

Hacking and Exploits

PhantomRPC: New Windows RPC Vulnerability Lets Attackers Escalate Privileges Across All Windows Versions

PhantomRPC is an architectural weakness in the Windows Remote Procedure Call (RPC) runtime that allows low-privileged processes to escalate to SYSTEM or Administrator by impersonating privileged clients. Disclosed by Kaspersky’s Haidar Kabibo at Black Hat Asia 2026, the flaw stems from how rpcrt4.dll handles connections to unavailable RPC servers: when a privileged process attempts an RPC call to a server that is offline or disabled, the RPC runtime can be…

Saugata DattaApr 26, 20264 min read497

Russian police arrest VasyGrek suspects and seize criminal equipment

NetamLoader: .NET Injection Attack Hits Government Windows 10 Build in Asia

PhantomRPC: New Windows RPC Vulnerability Lets Attackers Escalate Privileges Across All Windows Versions

Free Tools: IP, DNS, SSL