Network Anomaly Detection in KATA

Kaspersky Securelist reporting from July 2026 covers targeted cyber-espionage campaigns, memory-resident backdoors, ransomware and BitLocker extortion, malware frameworks targeting cryptocurrency users, supply-chain abuse, DNS and cloud-based C2, and threats to industrial automation systems. Notable activity includes OctLurk and SilkLurk in Central Asia, Mirage Kitten tools targeting the Middle East and Africa, Project CAV3RN using Outlook and DNS for C2, HelloNet abuse of the ViPNet update system, and GenieLocker ransomware affecting Windows, Linux, and ESXi.