Magazine menu Close Magazine menu

malware

Latest stories

cybersecurity predictions

What a year of changing cyberthreats can tell business

  • min read
    • For business leaders, knowing what's changing in cybersecurity helps you recruit the right people with the right skills today for what you'll soon need. Kaspersky's 2022 Security Bulletin (free download) analyzes which attacks their global cloud service Kaspersky Security Network (KSN) has detected, blocked and disabled over the past year. There are some numbers your business will want to know about. 15 percent of users had a malware attack Kaspersky Security Network blocked malware-class attacks on some 15 percent of users in 2022, or around 1 in 7. This shows just how common malware is. The malware class of attacks covers familiar cybercrime tools like viruses, trojans and ransomware. The countries where Kaspersky's software blocked the most malware attacks in 2022 were Tunisia, Taiwan and Algeria. 506 million web-based attacks Web-based attacks result from users downloading files that then trigger a cyberattack. These might come from websites made by cybercriminals, infected online resources within user-created content (like online forums) or legitimate resources that cybercriminals have hacked. Cybersecurity education can be a powerful tool in preventing web-based attacks. Heathrow Airport has a novel staff cybersecurity education that carefully targets those needing it most with 10-minute online learning modules. 1.4 million cryptocurrency mining attempts Cryptocurrency mining is very much on the rise. Kaspersky Security Network detected around 1.4 million attempts to install mining software in the past year. Mining means digitally solving complex mathematical problems that verify cryptocurrency transactions, which also earns cryptocurrency. It slows devices and uses much electricity. In November 2022, Kaspersky announced they'd seen a 230 percent growth in cryptocurrency mining in the third quarter of 2022 compared with the same period in the year before. 102 million attempts to visit malicious URLs Malicious URLs are a common tool in 'phishing' attacks – when cybercriminals send emails inducing recipients to click on links, downloading malware. Endpoint security is vital in protecting against phishing, as is employee cyber-awareness. 377,000 attempts to steal money These attacks were often in the form of 'banking Trojans'. In early 2022 a particularly sophisticated money-stealing Trojan popped up that masquerades as a banking app and imitates phone conversations with bank employees. The app fooled many, highlighting the need to teach employees 'cyber hygiene' – like remembering to pause and think before downloading anything. Those who provide legitimate apps or financial services might also reflect on how they can show customers their products are trustworthy. These big numbers in cybersecurity over the past year show how threats to business are growing and changing. Cybercriminals always find new ways to get through consumers' and employees' defenses. By combining hiring the right people with robust cybersecurity education and strong security solutions, your business will greatly reduce its chances of a serious attack succeeding. Then, you can spend your time on what you do best.
enterprise cyberthreats 2022

Five indispensable cyberthreat insights for enterprises

  • min read
    • Cyberthreats and cybercriminals' methods change all the time. Each year, we see things we've never seen before. Understanding what cyber researchers are finding can help your enterprise stay ahead of evolving cyberthreats, preventing costly data breaches and malicious damage. Kaspersky has the biggest global network of cybersecurity research and analyst teams, collaborating closely with product research and development. With expert researchers distributed across the globe, we see can escalate and respond to local situations fast. Here, we share some of our recent observations your business can act on today. 1. Ransomware is stepping it up a notch Fabio Assolini, Senior Security Researcher, Global Research and Analysis Team (GReAT,) Latin America, says: "This year, ransomware is no less active. Cybercriminals keep threatening retailers and enterprises worldwide. Watching these tendencies gives us threat intelligence to fight cybercrime today and helps us prepare for what we may see in the months to come. "Our research groups ransomware into three big trends: Ransomware that adapts to be able to infect different platforms, ransomware becoming more "industrialized" and cybercriminals taking sides in geopolitical conflicts. But despite its ever-increasing sophistication and targeting, there's still much enterprises can do to stay safe." What to do: Find out about the five best steps your business can take to fight ransomware – from keeping software up to date, to ensuring your Security Operations team has access to the latest threat intelligence. 2. Advanced Persistent Threats are coming out of the woodwork An Advanced Persistent Threat (APT) involves sneaky, sophisticated hacking techniques. It may hide malicious software in your system for a long time, stealing information or waiting for the moment to cause maximum damage. Kaspersky tracks more than 900 groups of APTs. David Emm, Principal Security Researcher, GReAT Global, says: "We became aware of a firmware-level APT compromise through our firmware scanner logs. The attackers had modified a single component to intercept the machine's boot sequence and introduce a sophisticated infection chain. The chain leaves no traces on the hard drive, as its components operate in memory only – a fileless attack with a small footprint." The researchers named the new ATP MoonBounce and have linked it to a known threat actor. What to do: Arm employees with the knowledge they need to protect your organization. Get APT threat reports on SecureList. 3. Apps can make Internet of Things devices even more vulnerable The Internet of Things (IoT) is a fast-growing ecosystem – forecasts predict we'll use more than 75 billion IoT devices by 2025. Among these, companion apps for internet-connected cars have attracted special attention. In early 2022, a 19-year-old hacker shared how he had accessed and controlled more than a dozen Tesla cars through their apps. The vulnerability of IoT devices, increasingly part of manufacturing and industry processes, has long been known. Our interest in transparency recently spurred Kaspersky analysts to look at car-controlling apps, finding their security and openness often lacking. What to do: Dan Demeter, Senior Security Researcher, GReAT Europe, Middle East and Africa says: "For an ongoing well-established security perimeter, we recommend periodic checks and updates for all applications used withing the perimeter, whether it's a consumer or a business environment. Remove any obsolete or not used apps from these environments as soon as possible." Demeter also highlights better practice among some vehicle companion apps. "Some use specially designed solutions from automakers, which, for example, make it impossible to unlock the doors remotely. With access to the vehicle's data through the manufacturer's website, there's no need to give credentials to an app, and users can revoke access any time." 4. Geopolitical tensions are raising denial-of-service risk Distributed Denial of Service (DDoS) attacks are cybercriminals' go-to targeted attack. They overwhelm a server, service or network with a flood of traffic, so you can't give your customers reliable online service. The Russia-Ukraine conflict has triggered a spate of DDoS attacks in both countries, targeting critical infrastructure, media and state-run services. Hacktivist groups have instigated some of these attacks, distributing apps, software and even games which can teach cybercrime skills to those with other aims, like extortion. Kaspersky researchers have noted a sharp rise in DDoS attacks across the board. What to do: Researchers advise businesses and nation states to prepare for DDoS attacks before they happen, through investing in suitable security controls and preparing defensive strategies with national internet service providers (ISPs.) Maher Yamout, Senior Security Researcher, GReAT Middle East, Turkey and Africa, says: "Deploy cyber defenses in advance. When an attack comes, it's too late. You never know when an emergency will happen, so today's the day to take care of your anti-DDoS protection." Threat intelligence also plays an important role in preventing DDoS attacks. Kaspersky is the only global threat intelligence provider with a major presence and expertise in Russia, where most advanced persistent threats and attacks originate. Security teams should subscribe to Kaspersky SecureList to stay up-to-date. 5. Malware keeps upping the ante Malware is common and costly. Over the past year, Kaspersky software prevented at least one malware attack on 20 percent of our users. Recently we've seen plenty of new and rehashed techniques aimed at disguising malware or letting it do more damage. Dr Amin Hasbini, Unit Head of GReAT Middle East, Turkey and Africa, says: "Since its discovery in 2014, we've seen the malware Emotet – originally designed to steal banking credentials – in many other forms, like as a delivery system for other malware and and botnet executable, using small employee mistakes to create big incidents. It mostly spreads nowadays through malicious email spam." What to do: Malware attacks often start with an employee making a small error of judgment, like clicking a link in a dodgy email, so one of the best ways to stay safe is to thoroughly educate all your staff in cybersecurity. Kaspersky research in partnership with Longitude, a Financial Times company, found leaders whose cybersecurity training programs can keep pace with the threat landscape say their companies are better prepared for a cyberattack. Immersive cybersecurity training is a powerful way to engage your workforce with learning in an age when there is much competition for their attention. Advanced cyberthreats are common. They have a big impact on business reputation and bottom line. When business leaders take cybersecurity action, they avoid spending more time later mopping up a cyberattack's damage. When choosing your cybersecurity vendor, look for those that participate in third-party tests and reviews, win awards and achieve top scores in independent tests. What's clear is that advanced threats are ever-changing, so having the most up-to-date threat intelligence will always be crucial for your business.
ATTACHMENT Dglobal cybersecurity priorities

COVID-19 has changed global cybersecurity. What must nations do now?

  • min read
    • During the pandemic, lockdowns and 'shelter in place' orders around the world have done much good. They've not only saved lives, they've shown us our cities without pollution and let businesses realize employees working from home can be more business benefit than business challenge. I spoke about the growing cyberthreat landscape and what we must do about it as part of a high-level leaders discussion on international cybersecurity during the United Nations Internet Governance Forum (IGF) 2020. During the pandemic, cybercriminals used new-found time to hone their skills and test out new methods. We saw a sharp rise in cybercrime of all kinds, from malware to advanced persistent threats (APT.) New hacking groups came on the scene, and with them, new kinds of attacks. New attacks and actors unmasked Here's just a sample of the expansion of cybercrime our researchers detected since the coronavirus pandemic came into our lives. This year we've seen unique malicious file detection rise 20 to 25 percent a day. Most threats, like malware, are relatively easy to deal with. But when what we're seeing is a rise in more professional cybercrime gangs, that's a different story. Kaspersky researchers are now monitoring more than 200 cybercrime gangs who've been launching hyper-targeted attacks against targets such as banks and governments. We've also seen more 'juniors' entering cybercrime. While they're easy to stop now, many will graduate from hacker kindergarten and join the pros. With the increasing use of the internet of things, the number of points where cybercriminals can attack has grown exponentially. We know they're willing and able. Take, for example, one of the most successful global attacks, the 2016 Mirai malware attack on domain name system provider Dyn. It took down hundreds of news websites around the world. How should nations respond to the new threat landscape? The cybersecurity impact of the pandemic has two parts. First, people are at greater risk of cyber-intrusion thanks to working from home and spending more time online. Second, there are more cybercriminals, and they've become better at what they do. Meanwhile, the digital economy has been growing fast. Many businesses decided to use the breathing space and necessity of the pandemic to digitalize new parts of their business. So we're at a place and time when organizations and their customers need to feel confident in these new ways of buying and delivering services. Building that confidence will help economies thrive. So how do we get there? I've got three priorities. Leaders discuss international cybersecurity in the United Nations Internet Governance Forum (IGF) 2020 1. Secure technology by design We can make technologies much more difficult and expensive to compromise, but they must be designed that way from the start. We have operating systems in devices already on the market that are so secure we had to devise a new way of talking about them – so we call this cyber-immunity. The chances of an attack on these systems succeeding means the cost to the criminal of a successful cyberattack is higher than the damage caused. To make critical infrastructure safer, we could deploy cyber-immune technologies across the network. The time to do it is now. 2. Enforcing cybersecurity law on an international level International cooperation is crucial for hunting down cybercriminals, but it looks as though the world isn't going in a 'cooperation' direction – it's becoming more fragmented. We need a space in cybersecurity where nations can cooperate safely, without geopolitical fractures getting in the way. 3. High-level cooperation requires high-level cybersecurity education As well as needing to overcome our differences, international cooperation against cybercrime will require 'cyber diplomats' to stay continually informed about the changing threat landscape. Good news for those imagining a boring slide talk in a dark basement – cybersecurity education keeps pace with innovation and developments in learning science. For example, learning through immersive gamified simulations like Kaspersky Interactive Protection Simulation (KIPS) is popular and effective. While the world recovers from the shocks of the COVID-19 pandemic, we must recognize much has changed, not least in cyberthreats. We need a new era of international cooperation to hunt cybercriminals. We need to make sure 'cyber diplomats' (those who develop and enforce national and international policy against cybercrime) fully understand the threats. As professional cybercrime gangs hone their skills, I predict we'll see cyberattacks grow at every level, harming business and governments. Thankfully, technology keeps evolving, and no one is powerless. Adopting cyber-immune systems will help nations keep the lights, water and internet running at times of crisis and beyond.

Give your threat intelligence an intelligence test

  • min read
    • The saying "ask and you shall receive" seems to need a footnote or two these days. Make sure the furnishings you're ordering aren't meant for a doll's house. Remember that romantic poem, roses are red; spring onions are green? And quite who would be the happy recipient of this 'magical' Christmas mug, we'll never know. Threat intelligence can also be a case of 'wrong item delivered.' There are many products out there described as threat intelligence that aren't. And customers might not realize they're not getting what they asked for. So how do you give your threat intelligence an intelligence test? Threat intelligence is data analyzed Threat intelligence identifies and analyzes cyber threats aimed at your business. The keyword is 'analyze.' It means to sift through piles of data, spot real problems by looking at context and put in place a solution specific to the problem. It's most often confused with "threat data." Threat data is a list of possible threats, without analysis of context or tailored solutions. Threat intelligence should captivate your security team Once upon a time, there were IP and URL blacklists. Early security products would just refer to these blacklists to warn of a dangerous IP or URL. Over time, the amount of threat data grew exponentially. It became difficult to define what was a real threat and what wasn't. Security software wasn't designed to process so many indicators of compromise, like malicious file hash sums, domains or botnet server addresses. Some products marketed as threat intelligence include threat feeds and indicators of compromise, but without context – they're just vast amounts of raw data. This is a problem. Giving security operations such 'intelligence' will cause too many false security alerts. Alert fatigue has a serious impact on the overall security of your company. Research found 52 percent of security alerts are not investigated. And data, however relevant, is useless unless it has context and can be acted upon. With true threat intelligence, an InfoSec team can stop a breach early and protect a network, or realize they're just seeing everyday malware that doesn't pose a serious threat. Threat intelligence should tell your future Identifying yesterday's threat is history. Threat intelligence now focuses on the quality of data sources. It's not enough for data to bring insights but not give guidelines for decisions and actions. And when its quality is limited by lack of sources – such as not seeing into the darknet, or lack of global, multilingual reach – it can't be processed into effective threat intelligence. Intelligence must be able to predict how your business should prepare for and combat future threats. Threat intelligence should adapt to your organization A threat intelligence solution must be able to adapt to an organization's security needs. It must guide the organization to set up internal data collection points around critical assets. It then matches that data with external threat intelligence to identify threats. Without this targeted approach, it won't succeed in prioritizing information needed to defend key assets. As Helen Patton, Chief Information Security Officer (CISO) at Ohio State University said in a 2019 Forbes article, "Threats are only a threat in the context of the risk to the business itself." Threat intelligence can be acted on Threat intelligence is something you can act on. It must integrate multiple sources of information into an organization's security operations, through a single point of entry. To be effective, the organization must be able to use both machine-readable and human-readable threat intelligence. Its delivery methods and formats must allow it to be smoothly integrated into existing security workflows. It must give unique insights into emerging threats, so security teams can prioritize alerts, maximize resources and accelerate decision-making. Does your organization's threat intelligence pass? If not, it's time to get what you were promised. This article was published in April, 2020.
evolution of supply chain attacks

Detection is better than cure: Seeing and preventing supply chain attacks

  • min read
    • Supply chain attacks represent something of a sea change among hackers. They're not new, but they're fast becoming more common, and evolving to evade detection. These attacks involve implanting the part of a virus that executes an attack (the payload) into components like software, firmware and hardware. That payload becomes part of the finished product. Companies that sell these products become unwitting distributors. They stow away silently on customers' computers or networks until something triggers their malicious processes. Here, we focus on software supply chain attacks, but it's worth a few words on the other two to understand the scale and scope of supply chain vulnerabilities. Hardware supply chain attacks Supply chain attacks on hardware are often crude and cheap. For example, implanting keyloggers in USB drives, capable of registering 8,000 pages of keystrokes, or inserting a microphone into Ethernet networking connectors (RJ45 plugs), stealing passwords and other sensitive data. Firmware supply chain attacks Hackers also tamper with firmware by embedding malicious code that enters customer devices. Boot firmware is often the target. By using the booting process, it only takes starting the hardware to execute the malware. Software supply chain attacks Hackers like software supply chain attacks because they only need to compromise one link in a long chain to smuggle malware everywhere. They can insert malicious code into software at several points during build, compilation, distribution and update. The increasing sophistication of enterprise software also increases the number of attack options. Attacks can target the software's source code, embedding malicious code in the build of a trusted app. Sometimes the code is embedded in an executable file with an infected compiler (a program that translates code from one language to another) or linker (a program that combines the data the compiler generates into one executable file). Another frequent target is software update mechanisms. While genuine software developers often 'sign' their executables and scripts with a digital certificate to give their identity and confirm the code is unaltered, supply chain attacks often include stolen certificates that seem genuine. Software developers dependent on open source code, usually smaller operators, are particularly vulnerable to supply chain attacks. Significant supply chain attacks Attacks that make their own a hit list Some supply chain attacks have used highly sophisticated pre-attack planning to identify suitable targets. Energetic Bear was one of the most significant attacks on critical infrastructure. It used an opening spear-phishing campaign to make a hit list of suppliers to target. Ghost in the app-creating tool Even Apple, famous for its virus resistance, fell victim to a supply chain attack. Hackers used Xcode, a tool for creating iOS and OS X apps, to smuggle malicious code into apps. Apple hosted these apps unwitting in its App Store. While developers usually download Xcode safely from Apple, it's also available on developer forums. Hackers embedded malicious code in these alternative sources. Researchers from Alibaba called these malicious variants 'XcodeGhost.' They contained just a few extra lines of code – hard to detect, but enough to penetrate. Backdoor in popular server management software The ShadowPad incident is one of the largest known and most sophisticated supply chain attacks. In 2017, Kaspersky researchers discovered a 'backdoor' (dubbed ShadowPad) planted in server management software used by hundreds of large businesses around the world. When activated, the backdoor lets attackers download further malicious modules or steal data. In this case, hackers had signed the malicious code with a legitimate certificate. The pointer to the infected function was also hidden from the user's view. The attackers had gained access not only to the certificates but also to the source code and build environment. Researchers in Kaspersky's Global Research and Analysis Team (GReAT) immediately notified the suppliers, NetSarang, who quickly pulled down the compromised software and replaced it with an earlier clean version. NetSarang proved that responding fast to cyberattacks makes a difference. Kaspersky and NetSarang found only one infected payload – an excellent result given the product's popularity. Cleaner attack goes right to the top CCleaner is a hugely popular system cleaner, downloaded more than two billion times. After a supply chain attack in September 2017, infected software was downloaded two million times. Hackers attacked through a tiny backdoor. They encrypted all strings, making them harder to detect. Like the ShadowPad attack, hackers signed their malicious code with legitimate digital certificates. These hackers wanted to get right to the top. They included a function in determining if the user had admin privileges. The attack would only continue if the user had access to the company's Command and Control function. Because the attack was highly selective, the full infection was downloaded only onto 40 computers. But the CCleaner infection's victims included some of the biggest names in enterprise tech – Samsung, Fujitsu, Intel, Sony and Asus. This made it one of the most damaging and effective supply chain attacks discovered. Hammering through automatic update functions Kaspersky researchers discovered the Operation ShadowHammer attack in January 2019. We found a suspicious file signed with a legitimate digital certificate from Asus. While distributed from Asus's official server, the files contained a sneaky backdoor. Supply chain attacks often target automatic update functions. At first, hackers planted Operation ShadowHammer's malicious code in Asus's live updater tool, but the mode of attack evolved over time. Operation ShadowHammer targeted more than 400 computers, with multiple unique backdoored samples. Asus was not the only target. Since our first discovery, we've identified several other cases, including digitally signed examples, from three other software businesses. Hackers signed backdoors with different certificates and chains of trust in each attack. Detection is better than cure Detecting supply chain attacks is nuanced work. Sometimes attacks don't directly manipulate original code, with updates downloaded and executed only in computing memory. Games are among the most attractive supply chain attack targets. Here, it's harder to know whether malware is part of the software's original functionality. For example, anti-cheating and IP protection mechanisms can trigger behavior analysis logics. Malicious code in supply chain attacks is only a tiny portion of code in an executable file. It's like trying to find a polar bear in a snowstorm. This is made harder by the valid code-signing certificates that often accompany the malicious code. How can businesses defend against supply chain attacks? Suppliers are softer targets than finished product vendors, partly because the final package is more extensive and complex. So what can businesses do about it? 1.      Use the best cybersecurity software Lightweight security solutions prioritize speed over rigor, leaving the risk of being fooled by supposedly legitimate code-signing certificates or mistaking suspicious files for false positives. Dedicated cybersecurity solutions do it better. A proven, corporate-grade security solution is essential for spotting and catching advanced targeted attacks. These analyze anomalies and give cybersecurity teams full visibility over their network, with an automated response. 2.      Hire the right team, and the red team Businesses should hire highly skilled information security personnel, including security specialists, SOC (security operation center) analysts and 'red teams.' 3.      Use threat modeling during software development During software development, companies must create a threat model for their development infrastructure to identify and eliminate risks in advance. Access models should apply the Principle of Least Privilege (PoLP) to restrict the risk of malicious access. 4.      Carefully manage supplier relationships Build trust that goes beyond traditional assumptions. 5.      Invest in response As we saw with NetSarang's rapid response to the ShadowPad attack, businesses must invest in response as well as protection. If you don't have internal capacity, involve an incident response team to investigate an incident or suspicious activity. Article published in 2019.
managed-endpoint detection response

How to know what level of endpoint protection you need

  • min read
    • Endpoints – meaning, any end of a digital communications connection, like servers, laptops and mobile devices – are cybercriminals' favorite way to get inside your infrastructure. Market data analysis firm IDC's 2019 study found 70 percent of breaches started on an endpoint. There are a few types of threats: traditional, complex or advanced, and targeted or advanced persistent threats (APTs.) Classic Endpoint Protection Platforms (EPPs) do a great job at protecting against traditional threats like malware, but complex or advanced threats are becoming more common as more cybercriminals get hold of advanced tools. Those digitizing their https://www.kaspersky.com/enterprise-security/endpoint-productbusiness also often want to add a few more security strings to their bow. And these days, cybercriminals aim advanced and complex threats at all kinds of businesses, not just household-name companies and nation states. That's why adding Endpoint Detection and Response (EDR) to your EPP is fast becoming the standard. And then, Managed Detection and Response (MDR) offers a way to achieve the same protection in a different way. We'll cover what these advanced options do, their benefits and which types of organizations need them. What is endpoint detection and response (EDR) and when do you need it? Once you've got an EPP you're happy with, think about whether you need EDR on top. EDR offers organizations of all sizes greater ability to protect themselves against complex and advanced threats. Although they're less common than traditional threats, they're costly and disruptive to business. EDR gives you better visibility of and instant response to complex threats. It continually monitors endpoints, aiming to identify, investigate and respond. Your EDR may include tools like advanced detection engines, real-time analytics and the ability to hunt, investigate and centrally respond to evasive threats across the protected infrastructure. There should be applied threat intelligence and visibility into endpoints. Level up your endpoint protection with detection and response gives a full list of what to expect. EDR gives you tools for visibility, investigation and response. Your team can see what's happening on all endpoints and understand the scale of the threat. Investigation capabilities let you understand the root cause of a threat. Threat-hunting tools let your cybersecurity experts actively seek out any threats hiding in your infrastructure. After detecting and analyzing the threat, a fast response matters. Each organization is different. While some might have extensive cybersecurity expertise, others need a simpler solution. If your business has in-house cybersecurity expertise, you may benefit from better threat discovery, threat hunting and centralized incident response, such as Kaspersky Endpoint Detection and Response, also available as part of Kaspersky Anti-Targeted Attack Platform. Alternatively, Kaspersky Endpoint Detection and Response Optimum is a simpler solution for the IT department without cybersecurity specialists on hand. When do you need managed detection and response (MDR?) EDR provides advanced defensive capabilities, but you need to have your own cybersecurity experts to use it. MDR, on the other hand, means external experts manage your defense. With MDR, skilled professionals give you continuous protection 24 hours a day, seven days a week. It's ideal for organizations that struggle to find expertise or with limited in-house resources. Many organizations that opt for MDR are small- to medium-sized. For large organizations, MDR means you can outsource detecting, validating and prioritizing incidents rather than having as many cybersecurity specialists in house. If you're not sure whether EDR or MDR is best for your business, this infographic lays out the benefits of each. Endpoints are often vulnerable because they're what we use to create, communicate and store information. Our people using them can be manipulated by social engineering or make the wrong decision during moments of inattention, so security awareness training will help strengthen your endpoint. But as threats increase, your EPP may not be strong enough. That's why EDR is fast becoming the new standard. If you don't have the cybersecurity expertise in house, or want to free them up, MDR lets you bolster your security without the struggle of bringing new people on board.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries