The changing antivirus landscape

I recall coming into the anti-virus business when there were less than 100 viruses [including variants] and the fingers of two hands were sufficient to create your own ‘wild list’.

How things have changed! At that time, the prospect of hundreds [rather than tens] of viruses caused alarm, raising questions of how anti-virus vendors would cope with such a ‘glut’.

And yet here we are with more than 100,000 records in the Kaspersky database and nobody blinks an eye! And so many Trojans [whether backdoors, downloaders, proxies or keyloggers] are received from the field that the value of any ‘wild list’ is now questionable.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.