Kaspersky Archives

Tech Optimizer

October 16, 2026

New Botnet Puts Home PCs at Risk: AV-Comparatives Publishes Malware Protection Test

AV-Comparatives evaluated 20 consumer security products against 10,000 malware samples, focusing on the x47.c botnet, which emerged in October 2026 and is marketed by WraithTools. This botnet can steal sensitive information and turn infected devices into proxies for cybercriminals. Research indicates it can extract passwords, cookies, and data from AI service accounts. The U.S. Department of Justice noted the risk to freelancers and small businesses from such threats. In its September 2026 Malware Protection Test, AV-Comparatives found that 15 out of 20 products reached the highest protection tier, with six receiving the ADVANCED+ award: Bitdefender, ESET, G DATA, Kaspersky, Total Defense, and VIPRE. The testing revealed a reliance on cloud-based detection, emphasizing the need for consistent internet connectivity for optimal protection.

Tech Optimizer

October 7, 2026

Antivirus: Do you still need it?

Purchasing antivirus software is often seen as necessary but can be frustrating, especially with built-in security features available on most computers. Windows includes Microsoft Defender Antivirus, which has been independently tested and scored well for protection, performance, and usability. Mac users have XProtect for malware detection. Users should verify that their existing protection is enabled and up-to-date before considering a subscription. Antivirus programs combat various types of malware, using methods like signature scanning and heuristic analysis, but they are not infallible. Research on antivirus effectiveness varies, with scores reflecting different criteria and not universally applicable detection rates. Subscriptions may be worthwhile if they offer specific features, but users should be cautious about renewal prices and unnecessary multiple installations. Maintaining updated software and practicing good security habits are essential for protection. For everyday use, built-in protection is often sufficient unless additional benefits justify the cost of extra software.

Tech Optimizer

October 2, 2026

AhnLab V3 Scores Perfect 18 in Global Antivirus Test

AhnLab’s V3 security software achieved a perfect score of 18 points in AV-TEST’s evaluation for antivirus software targeting the Windows operating system, conducted for July-August 2026. The evaluated products were V3 Endpoint Security and V3 Internet Security. AV-TEST assesses security products based on protection, performance, and usability, with each category scoring up to 6 points. AhnLab has participated in AV-TEST’s evaluations since 2013 and competes with major security companies like Microsoft, Kaspersky, and Bitdefender.

Tech Optimizer

October 1, 2026

AhnLab V3 earns perfect score in AV-TEST evaluation

AhnLab’s V3 antivirus software received a perfect score in the latest evaluation by AV-TEST, making it the only South Korean product to achieve this in the assessment conducted in July and August 2026. Both V3 Endpoint Security and V3 Internet Security scored the maximum of 18 points, earning the title of “Top Products” from AV-TEST. AhnLab has participated in AV-TEST’s evaluations since 2013, competing against major global cybersecurity firms.

Tech Optimizer

September 25, 2026

This Mac malware is somehow using iCloud calendar invites to try and steal your data

Cybercriminals have developed an infostealer called MacSync, targeting Mac devices by using iCloud calendar events and cloud storage. This malware disguises itself as fake cryptocurrency wallets and pirated software. It begins with a loader that retrieves instructions from calendar entries and deploys malware to exfiltrate sensitive information, including credentials and cryptocurrency wallets. Recent versions have introduced an Objective-C backdoor that mimics Finder. Victims are often tricked into downloading these malicious applications, and effective antivirus solutions can prevent damage. Cybercriminals use tactics like SEO poisoning and phishing to direct victims to fraudulent websites or social media promoting pirated software. In one case, the loader was marketed as a cryptocurrency wallet, and victims encountered a misleading ClickFix error message that prompted them to execute a command in the Terminal.

Winsage

September 23, 2026

PAYLOAD ransomware hijacks Windows Group Policy in encryption-less attacks

A sophisticated PAYLOAD ransomware attack targeted an unnamed manufacturing organization in the Middle East, exploiting vulnerabilities in Microsoft Active Directory Group Policy. The attackers accessed the network through a compromised domain account via FortiGate SSL VPN on April 11, escalated privileges to domain administrator by April 13, and created a malicious Group Policy Object (GPO) named "PAYLOAD." This GPO was linked at the root of the domain, allowing it to affect nearly all domain-joined Windows workstations. The attackers distributed ransom notes, altered desktop images, displayed ransom messages at login, and disabled local administrator accounts. A second GPO, "win Firewall Off," was deployed to disable Windows Firewall across all profiles. The malicious policies activated on April 14 after systems were rebooted, causing widespread disruption. The attackers also exfiltrated data from file servers and published it on the dark web, while Kaspersky found no evidence of Windows file encryption or active malware processes. Recommendations for organizations include monitoring GPO creation, checking for unexpected changes, implementing multi-factor authentication for VPN access, and protecting privileged accounts.

Winsage

September 22, 2026

PAYLOAD ransomware hijacks Windows Group Policy in encryption-less attacks

A sophisticated PAYLOAD ransomware attack targeted a manufacturing organization in the Middle East, exploiting vulnerabilities in Microsoft Active Directory Group Policy. The attackers gained initial access on April 11 by compromising a domain account through the company's FortiGate SSL VPN. By April 13, they escalated privileges to a domain administrator and created a malicious Group Policy Object (GPO) named “PAYLOAD,” which was linked at the root of the domain. This GPO allowed them to distribute a ransom note, change desktop images, display a ransom message during login, and disable the local administrator account. A secondary GPO, “win Firewall Off,” was used to disable Windows Firewall across all profiles. The malicious changes activated on April 14 after system reboots, causing widespread disruption. The attackers also exfiltrated sensitive data, which was later released on the dark web. Kaspersky's investigation found no evidence of file encryption or active malware processes, indicating the attack was contained within Active Directory. Recommendations for organizations include monitoring GPO modifications, implementing multi-factor authentication for VPN access, and safeguarding privileged accounts.

Tech Optimizer

September 22, 2026

Kaspersky: 5 Security Essentials Beyond Built-In Antivirus

India's internet usage has rapidly evolved, with the Unified Payments Interface (UPI) transforming smartphones into banking hubs and daily tasks being conducted online. Despite this digital shift, many users rely on pre-installed security software, which may not be sufficient against increasing cyber threats. In 2025, nearly one in four internet users in India faced web-based cyber threats, with over 47.5 million threats blocked, averaging about 130,000 daily. Kaspersky's Safe Money feature provides real-time verification of banking and shopping sites, while its anti-phishing capabilities respond to rapidly changing scams. Scammers are using multi-channel approaches, prompting Kaspersky's system to flag suspicious activity across platforms. Credential theft increased by 20% in 2025, with over 225,000 attacks thwarted, and Kaspersky offers identity monitoring to alert users of data leaks. Additionally, Kaspersky Premium provides 24/7 human support for suspicious activities, addressing the limitations of standard antivirus tools in a complex digital threat landscape.

Tech Optimizer

September 22, 2026

When “Good Enough” Isn’t Enough: 5 Security Essentials Kaspersky Covers That Built-In Antivirus Doesn’t

India's digital landscape has rapidly evolved, with the Unified Payments Interface (UPI) turning smartphones into banking hubs and shifting many routine tasks online. However, users often rely on basic pre-installed security software, underestimating online threats. In 2025, nearly one in four internet users in India faced web-based threats, with over 47.5 million incidents blocked. Kaspersky addresses five critical gaps in online security: 1. Real-Time Site Verification: Kaspersky’s Safe Money feature provides real-time verification of banking and shopping sites, which standard antivirus tools lack. 2. Live Anti-Phishing Protection: Kaspersky offers real-time anti-phishing capabilities with a continuously updated threat database, responding faster than traditional antivirus solutions. 3. Cross-Channel Threat Detection: Kaspersky flags suspicious activities across multiple channels, unlike single-channel antivirus tools. 4. Identity and Data-Leak Monitoring: Kaspersky alerts users when their information appears on the dark web, integrating this feature into its protection suite. 5. Round-the-Clock Human Support: Kaspersky Premium provides 24/7 human support for users facing suspicious transactions or alerts. Credential theft targeting Indian networks increased by 20% in 2025, with over 225,000 attacks thwarted. The sophistication of digital threats in India has outpaced basic defenses, necessitating advanced protection layers.

Tech Optimizer

September 18, 2026

Best Free Antivirus for Windows 2026: 6 to Install, 1 to Skip

Avast Free Antivirus is recognized as the best free antivirus solution for Windows in 2026, achieving a perfect score from AV-TEST. It operates on the same engine as paid versions, providing comprehensive protection. Other notable free antivirus options include Bitdefender Antivirus Free, which is efficient for older systems; Microsoft Defender, a built-in option with solid protection; AVG AntiVirus Free, suited for older hardware; Avira Free Security, which includes additional tools; and Malwarebytes Free, best for cleaning infections. Each product generates revenue through upselling or data collection. Avast scored 99.78% in detection tests, while Bitdefender achieved 97.6%, and Microsoft Defender reached 99.93%. AVG matched Avast with a 99.97% protection rate, and Avira recorded 99.96%. Malwarebytes had a detection rate of 99.57%. Kaspersky is noted as a product to avoid due to misleading trial offers.