Kaspersky Archives

Tech Optimizer

February 11, 2026

How to Disable Windows 11 Defender: Temporary and Permanent

Microsoft Defender Antivirus is the built-in security solution for Windows 11, protecting against viruses, malware, and ransomware. Users may need to disable it temporarily or permanently for various reasons, including software installation, penetration testing, performance issues, transitioning to third-party antivirus solutions, or troubleshooting conflicts. Temporary disabling can be done through the Windows Security app, which will automatically re-enable after a restart. Permanent disabling requires changes in Group Policy, applicable only to Windows 11 Pro, Enterprise, and Education editions, and necessitates disabling Tamper Protection first. Another method for permanent disabling is installing a third-party antivirus, which automatically deactivates Defender's real-time protection. Windows 11 Home users cannot use Group Policy for permanent disabling but can still temporarily disable Defender or install a third-party antivirus. Disabling Defender exposes the system to threats, and users should ensure they have alternative protection in place. Major Windows updates may reset Defender settings, and caution is advised when modifying system settings.

Tech Optimizer

January 22, 2026

Hackers Weaponized 2,500+ Security Tools to Terminate Endpoint Protection Before Deploying Ransomware

A large-scale campaign is exploiting the truesight.sys Windows security driver from Adlice Software’s RogueKiller antivirus to disable endpoint detection and response (EDR) and antivirus solutions, facilitating the deployment of ransomware and remote access malware. This attack utilizes over 2,500 validly signed variants of the driver, allowing attackers to manipulate legacy driver signing rules to load pre-2015 signed drivers on Windows 11 machines. The vulnerable TrueSight driver exposes an IOCTL command that enables attackers to terminate security processes, providing them with kernel-level access to bypass user-mode protections. The infection chain typically starts with phishing emails or compromised sites, leading to the installation of a downloader that retrieves additional malicious components. The malware establishes persistence and deploys an EDR killer module targeting nearly 200 security products. Once defenses are disabled, the final payload, often a remote access trojan or ransomware, executes with minimal visibility, completing the attack in as little as 30 minutes.

Tech Optimizer

January 7, 2026

Norton in 2026: Is the Old-School Antivirus Brand Still Worth Your Trust?

Norton has evolved into a comprehensive cybersecurity suite by 2026, transitioning from traditional antivirus software to a holistic solution under Gen Digital Inc. Its offerings include Norton 360, which provides real-time malware and ransomware protection, a built-in unlimited data VPN, password management, dark web monitoring, and identity protection on higher tiers. The Norton 360 Deluxe plan is popular for households, offering high protection scores, a usable VPN, dark web monitoring, cross-platform support, and identity protection features. Users appreciate its ease of use, strong protection record, and the value of the VPN, while some express frustration with upselling, auto-renew pricing, and performance on older machines. Norton competes with brands like Bitdefender, Kaspersky, and McAfee, with its all-in-one convenience being a key advantage. It is suitable for families and less tech-savvy users but may not be ideal for those preferring minimalist setups or who have older hardware.

Tech Optimizer

January 6, 2026

Kaspersky Premium isn’t just antivirus software: It’s so much more

In Australia, scams caused losses nearing [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Cybersecurity threats continue to escalate, presenting significant challenges for individuals trying to navigate the digital landscape. In Australia alone, scams resulted in losses nearing 0 million in 2025, not accounting for the severe ramifications of data breaches and identity theft. This alarming trend underscores the importance of investing in robust security solutions, such as Kaspersky Premium, to safeguard against these evolving online risks. As cybercriminals become increasingly adept at crafting convincing phishing messages and emails, the necessity for a vigilant second opinion becomes apparent. The last thing anyone wants is to fall victim to a scammer masquerading as a trusted entity, like a local postal service. Fortunately, individuals need not face these digital threats alone; the rapid emergence of new risks can feel overwhelming, akin to playing an endless game of online Whac-A-Mole. Fortunately, antivirus software has evolved significantly, expanding its capabilities beyond mere virus protection. Modern solutions now address a spectrum of threats, including scams, privacy breaches, and even monitoring the dark web for potential data leaks. Among the top contenders in this arena is Kaspersky, recognized by independent testers for its effectiveness. What is Kaspersky Premium? Kaspersky Premium represents the pinnacle of the brand’s security offerings, designed for everyday users across various platforms, including PC, Mac, Linux, Android, and iOS. This comprehensive service not only secures hardware but also vigilantly guards against lurking online threats. Beyond real-time antivirus protection, Kaspersky Premium enhances online safety by securing payments, encrypting sensitive documents to protect personal identity, and providing a built-in VPN for private browsing. Given the prevalence of data breaches, the software proactively scans for and alerts users if their personal information has been compromised online or on the dark web, enabling timely actions like changing passwords or updating sensitive details. The extensive features of Kaspersky Premium may initially seem daunting, but the user-friendly interface simplifies navigation, presenting essential information at a glance. During the initial setup, users are guided through the various features, including an indicator of device health that alerts them to potential threats that the software can eliminate. A notable aspect of Kaspersky Premium is its emphasis on multi-device protection. While many may think of antivirus software as a desktop necessity, the reality is that smartphones and tablets are equally vulnerable. By default, a Kaspersky Premium subscription covers five devices, with the option to expand coverage to as many as twenty. Why use internet security software in 2025? In an age where daily activities such as banking, shopping, and business transactions are increasingly conducted online, relying on luck for security is no longer viable. Kaspersky boasts a strong reputation in the cybersecurity realm, recognized for its top-rated products by AV-Comparatives, an independent organization that evaluates security software. Its effectiveness in managing real-world threats without compromising system performance is highly regarded. The primary rationale for adopting online security software lies in the comprehensive nature of modern solutions like Kaspersky Premium. This software not only actively protects your online presence but also proactively addresses emerging threats, making it more than just an antivirus program. For instance, Kaspersky Premium can identify which email addresses have been involved in public data breaches, providing critical information that users need to act upon swiftly. Prompt notifications enable users to update passwords for affected accounts, with the software offering built-in password management tools that generate strong passwords and store them securely. This high level of security extends to offline activities as well. While regular digital file backups are advisable, Kaspersky can also assess the health of storage drives, serving as a reminder to maintain multiple file locations for added security. For families, Kaspersky Premium includes a year of Kaspersky Safe Kids, allowing parents to implement content filters, set screen time limits, and track their children's locations to ensure their safety online. For those who may not require the full suite of features, Kaspersky also offers Standard and Plus options, catering to varying needs. However, Kaspersky Premium stands out as the most comprehensive solution, equipped to tackle modern security challenges now and in the future. Explore the complete Kaspersky suite of online security software today and enjoy an exclusive 20% discount on Kaspersky Premium with the code ‘GadgetGuy’." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"] million in 2025, highlighting the need for robust security solutions like Kaspersky Premium. Kaspersky Premium is designed for various platforms (PC, Mac, Linux, Android, iOS) and offers features such as real-time antivirus protection, payment security, document encryption, and a built-in VPN. It scans for compromised personal information online and on the dark web, alerts users of potential threats, and supports multi-device protection, covering five devices by default. Kaspersky is recognized for its effectiveness in managing real-world threats and is rated highly by AV-Comparatives. The software can identify email addresses involved in public data breaches and includes password management tools. Kaspersky Premium also provides Kaspersky Safe Kids for family protection and offers Standard and Plus options for varying needs.

Tech Optimizer

December 28, 2025

Threat Actors Advertised NtKiller Malware on Dark Web Claiming Terminate Antivirus and EDR Bypass

A malicious entity named AlphaGhoul has introduced a tool called NtKiller, designed to disable antivirus software and endpoint detection systems, posing a threat to organizations using traditional security measures. NtKiller was advertised on an underground forum, claiming to allow attackers to operate undetected while executing malware. It reportedly circumvents security programs like Microsoft Defender, ESET, Kaspersky, Bitdefender, and Trend Micro, and can bypass enterprise-grade Endpoint Detection and Response solutions in aggressive modes. Analysts from KrakenLabs noted that NtKiller uses early-boot persistence mechanisms to evade detection and operates on a modular pricing structure, with core functionality available for [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: A malicious entity known as AlphaGhoul has recently surfaced within the cybercriminal underworld, promoting a tool dubbed NtKiller. This tool is engineered to discreetly disable antivirus software and endpoint detection systems, posing a new threat to organizations that rely on traditional security measures. NtKiller was unveiled on an underground forum frequented by individuals seeking to buy and sell hacking services. The advertisement claims that this tool enables attackers to operate undetected while executing their malware on compromised machines. The introduction of NtKiller signifies a formidable challenge for businesses that depend on established security solutions. According to the threat actor, the tool is capable of circumventing several widely-used security programs, including Microsoft Defender, ESET, Kaspersky, Bitdefender, and Trend Micro. Alarmingly, it is also said to bypass enterprise-grade Endpoint Detection and Response (EDR) solutions when utilized in aggressive modes. Analysts from KrakenLabs have observed that NtKiller employs early-boot persistence mechanisms, allowing it to remain concealed and evade detection by security teams once activated. This stealthy approach complicates efforts to identify and eliminate the malware. Further investigation by KrakenLabs revealed that NtKiller operates on a modular pricing structure. The core functionality is available for 0, with additional features such as rootkit capability and User Account Control (UAC) bypass each priced at an extra 0. This pricing model indicates that the tool has been meticulously crafted for commercial distribution within the cybercriminal ecosystem. Beyond merely terminating processes, NtKiller is purported to support advanced evasion techniques, including HVCI disabling, VBS manipulation, and memory integrity circumvention. Technical capabilities The technical features attributed to NtKiller render it particularly perilous in the hands of adept attackers. The tool's early-boot persistence mechanism allows it to embed itself during system startup, prior to the activation of many security monitoring systems. This timing advantage facilitates the execution of malicious payloads in an environment where detection capabilities are significantly diminished. Moreover, the anti-debugging and anti-analysis protections embedded within NtKiller hinder researchers and automated tools from scrutinizing the malware's behavior, resulting in a substantial knowledge gap regarding its true capabilities versus its promotional claims. Another critical feature is the silent UAC bypass option, which enables malware to acquire elevated system privileges without triggering standard Windows prompts that could alert users to suspicious activities. When combined with rootkit functionality, this allows attackers to maintain persistent access to compromised systems while remaining undetected by conventional security measures. It is essential to highlight that these capabilities have yet to be independently verified by third-party researchers, leaving the actual effectiveness of NtKiller uncertain. Organizations are urged to remain vigilant and ensure their security tools incorporate behavioral detection mechanisms that extend beyond signature-based identification to effectively combat such emerging threats. Follow us on Google News, LinkedIn, and X to Get More Instant Updates, Set CSN as a Preferred Source in Google." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"] and additional features priced at 0 each. The tool supports advanced evasion techniques, including HVCI disabling, VBS manipulation, and memory integrity circumvention. Its silent User Account Control bypass option allows malware to gain elevated privileges without alerting users. The effectiveness of NtKiller's capabilities has not been independently verified, prompting organizations to enhance their security measures beyond signature-based detection.

AppWizard

December 22, 2025

Frogblight Malware Targets Android Users With Fake Court and Aid Apps

A new Android-based Trojan named Frogblight is targeting mobile users in Turkiye to steal funds from bank accounts. Identified by Kaspersky's Securelist in August 2025, it spreads through smishing, where scammers send deceptive SMS messages about legal court cases or financial aid. These messages often include links to download malicious applications disguised as legitimate support tools. The malware, which can conceal itself and deactivate on simulated devices or within the U.S., requests extensive permissions to access SMS messages and device storage. Once installed, it opens a legitimate government website to appear credible and injects JavaScript to record keystrokes during banking logins. Recent versions have added keylogging, contact list theft, and private call log collection. The malware has evolved to disguise itself as the Google Chrome browser and other tools, and its source code is available on GitHub, indicating it may be marketed as malware-as-a-service. Kaspersky advises users to avoid downloading APK files from untrusted sources and to scrutinize app permission requests.

AppWizard

December 12, 2025

Before You Download a Minecraft APK, Read This

Minecraft is one of the most downloaded games in history, leading to a high demand for free or modded APK versions, particularly among Android users. Downloading unofficial Minecraft APKs is generally unsafe due to several risks: 1. High malware infection rates: Gaming APKs are significant conduits for Android malware, with Minecraft APKs frequently flagged. Reports indicate that game-related APK downloads account for 19% to 28% of Android trojan distribution cases. 2. Fake Minecraft APK sites often engage in phishing: Over 50% of such sites feature intrusive ads or misleading download buttons, and nearly 30% redirect users to phishing landing pages. 3. Modified APKs may request dangerous permissions: Many modified APKs ask for permissions that exceed basic functionality, such as access to SMS, device admin privileges, and the microphone and camera. 4. Lack of automatic updates creates long-term security vulnerabilities: APKs from external sites do not receive automatic updates, may contain known vulnerabilities, and can be replaced by more harmful versions. An example is given of a user named John, who downloaded a seemingly harmless APK that contained hidden spyware, leading to issues with his device and privacy. Many users download Minecraft APKs to avoid purchase costs, but the risks to their devices and data are significant.

Tech Optimizer

November 13, 2025

Banned Russian antivirus maker Kaspersky rolls out new products — basic plan for Linux starts at $59.99 a year

Kaspersky has entered the Linux market by porting its flagship antivirus software for Linux, initially priced at .99 for the first year, increasing to .99 thereafter. This product targets Linux home users outside the U.S. and aims to address the security needs of Linux users, who may have previously felt underserved in antivirus protection.

Tech Optimizer

November 12, 2025

Kaspersky Antivirus is Now Available for Linux. Will You Use it?

The Linux ecosystem is facing increased threats from sophisticated cybercriminals targeting critical infrastructure. Kaspersky, a Russian cybersecurity firm, has launched antivirus protection specifically for home Linux users following a ban on its products in the U.S. as of July 2024. This marks the first time Kaspersky's home user products officially support Linux, with compatibility for major 64-bit distributions like Debian, Ubuntu, Fedora, and RED OS. The software includes features such as real-time monitoring, behavioral analysis, automatic scanning of removable media, anti-phishing alerts, online payment protection, anti-cryptojacking capabilities, and AI-powered scanning. However, Kaspersky for Linux is not GDPR-ready, which may concern EU users regarding data protection compliance. Users need an active paid subscription to download the software, but a 30-day free trial is available. Installation is straightforward, with DEB and RPM packages provided.

Tech Optimizer

November 7, 2025

Malwarebytes scores 100% in AV Comparatives Stalkerware Test 2025

The AV-Comparatives Stalkerware Test 2025 evaluated 13 Android security solutions against 17 stalkerware-type applications. The test revealed that stalkerware remains a significant threat, often installed covertly and designed to evade detection. Malwarebytes achieved a perfect 100% detection rate, while Bitdefender, ESET, Kaspersky, and McAfee each detected 94%. Avast, Avira, and F-Secure identified 88%, Norton and Sophos around 82%, and G Data (65%), Google (53%), and Trend Micro (59%) had lower detection rates. The evaluation emphasized the importance of clear communication of threats to potential victims. Malwarebytes' involvement in the Coalition Against Stalkerware highlights its commitment to user safety and effective detection of stalkerware.