backdoors

In 2025, just as in the year prior, supply-chain attacks remained one of the most severe threats facing organizations. We’re breaking down last year’s most noteworthy incidents.

A new wave of ClickFix attacks spreading a macOS infostealer are posting malicious user guides on the official ChatGPT website by piggybacking the chatbot’s chat-sharing feature.

Official gaming websites and platforms may seem safe, but even there gamers occasionally encounter malware. We break down infection cases involving Endgame Gear, Steam, and Minecraft.

WordPress sites are increasingly becoming targets of attacks exploiting vulnerabilities in plugins and themes. In this post, we examine recent cases and share protection tips.

Spoiler: nothing good. Along with pirated software, you’ll probably pick up a miner, stealer, or backdoor.

A security researcher has investigated his own smart mattress cover, discovering several ways to hack it — including through a backdoor preinstalled by the developer.

We look at the most notable supply-chain attacks of 2024.

A backdoor implanted into XZ Utils has found its way into popular Linux distributions.

Ethical hackers told 37C3 how they found a few eye-openers while breaking DRM to fix trains.

Although malware most often infiltrates corporate infrastructure through e-mail, it’s not the only infection method.

The Lazarus group continues to prey on cryptocurrency: cybercriminals distribute DeFi wallets with built-in backdoor.

We explain why game mods can be dangerous, using as an example malicious mods for Cities: Skylines.

Unknown attackers tried to add a backdoor to PHP scripting language source code.

Kaspersky experts found the PhantomLance Trojan backdoor for Android in Google Play.

Dave and Jeff discuss a number of issues ranging from backdooring encrypted chats to POS malware and more.

Cybercriminals attack Telegram users with an old trick for masking malware as pictures.

In October 2017, Kaspersky Lab initiated a thorough review of our telemetry logs in relation to alleged 2015 incidents described in the media. These are the preliminary results.

A new APT group is seen to have been exploiting hotpatching, a now-deprecated feature in Windows operating systems, to carry out their attacks.

What’s going on with Apple and the FBI? Find out.

Our today’s weekly news digest covers three stories about the mistakes coders make when programming robots, the way other people exploit those design flaws, and then the reckoning.

The Carbanak APT group managed to steal a total of $1 bln from dozens of banks worldwide