Eugene Kaspersky
@e_kaspersky · Europe
Eugene Kaspersky is followed by Storyz World for research and subject expertise coverage connected to Russia in the Europe chapter.
The financially motivated Toy Ghouls group, which has been attacking Russian organizations since 2025, is expanding its toolkit: in addition to the GenieLocker ransomware, we’ve detected use of its own backdoor for the first time – two versions at once, with non-standard C2 channels (the HiveMQ MQTT broker and the Element messenger). Details: https://t.co/jMfcMePzw4
The Mirage Kitten APT’s toolkit is evolving: we’re exploring its two previously undocumented cross-platform RATs – NodeRabbit and PollCat – that are targeting aviation and FinTech sectors across the Middle East and Africa. Spear-phishing (fake recruiters and trojanized coding challenges) is the key attack vector. These RATs mark the group's first documented use of Node.js/JavaScript malware. Full analysis: https://t.co/nnvf1gxYeT
A while ago we were tasked to analyze a file with an initial classification as adware. A deeper research turned up suspicious network activity - the sample did far more than serve ads. In fact, its advertising functionality doesn’t even work; instead, it triggers an infection chain that delivers the ValleyRAT backdoor. More details 👉 https://t.co/O9gjknTxdP
An in-depth research of the malware spread through the built-in updaters of Android-based automotive head unit firmware. This is the first documented case of malware found on a car head unit with an infection chain specific to that type of device. 👉 https://t.co/G0xYchaFTF https://t.co/WLP4NASxHo