Kaspersky Uncovers NetamLoader Malware Targeting Asian Government
Kaspersky’s Global Research and Analysis Team (GReAT) has uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country. The attackers used legitimate software components to launch NetamLoader, a previously unknown malware framework that can receive and run additional code while concealing its activity.
Kaspersky identified one victim through its threat monitoring network and has not linked the attack to any known threat group. The malware was built for this specific operating system: among other steps, it removes selected entries from the logs of the system’s own update component.
The investigation began in the first half of 2026, when Kaspersky detected a suspicious configuration file inside an archive stored in a Windows update folder. Most of the accompanying programs were legitimate, including components of the third-party patch management tool Patch My PC and Microsoft signed module. The attackers used modified supporting files...
Copyright of this story solely belongs to www.itvoice.in. To see the full text click HERE
