Network Anomaly Detection in KATA

Kaspersky Securelist reports from July 2026 cover targeted cyber-espionage campaigns, memory-resident backdoors, ransomware and BitLocker extortion, malware delivery through trusted update systems, cloud and DNS-based command-and-control, credential and cryptocurrency theft, and threats to industrial automation. Activity affects Central Asia, the Middle East and Africa, Russia, Southeast Asia, cryptocurrency users, and industrial environments. The collection includes both newly identified malware families and evolving intrusion techniques such as Kerberoasting, DNS tunneling, RDP, web shells,R