Supply chain attack: what you should know

A supply chain attack targeted the eScan antivirus software, distributing malware through the update server. The attack, detected on January 20, involved a malicious Reload.exe file that initiated a multi-stage infection chain. This malware prevented further antivirus updates, ensured persistence through scheduled tasks, and communicated with control servers to download additional payloads. Attackers gained unauthorized access to a regional update server, deploying a malicious file with a fake digital signature.eScan developers quickly isolated the affected infrastructure and reset access credentials. Users are advised to check for infection signs, use a provided removal utility, and block known malware control server addresses. Kaspersky's security solutions successfully detect the malware used in this attack.

• Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution ChainMalware2026-10-25
• Technology that blocks DGA domains | Kaspersky official blogAnalysis2026-10-23
• Infostealer riding the AI TrainMalware2026-10-23
• LiteLLM release pipeline hacked to distribute info-stealer malwareMalware2026-10-22
• Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affectedBreach2026-10-21