
Hacker Group Attacks Russian Organizations with Penetration Testing Tool
By its capabilities, Ravage is similar to remote access tools.

By its capabilities, Ravage is similar to remote access tools.

Attackers continue to gain access using social engineering schemes on Telegram.

Attackers have adopted the methods of phone scammers.

In February 2026, attackers began spoofing warnings from government agencies using a transport-related theme.

Stan Ghouls has been conducting targeted campaigns in Russia, Kazakhstan, Kyrgyzstan, and Uzbekistan since at least 2023.

With protection against dangerous links in Max and Telegram notifications.

Kaspersky Lab shared details about the attack.

As digital systems evolve, risks arise that go beyond traditional cyber threats.

This was reported by Kaspersky Lab at a press conference dedicated to the results of 2025 and forecasts for 2026.

In 2025, there was a surge in the number of incidents where fraudsters attacked Russian organizations through electronic document management systems.

Targets included the public sector and private companies in Russia, as well as Myanmar, Mongolia, and Thailand.

In addition to SIEM, Threat Intelligence and EDR solutions are in greatest demand.

The developers promise that the software will be able to detect attacks using sophisticated techniques to bypass detection mechanisms.

The solution meets the requirements for multifunctional network-level firewalls of protection class 4.

The new version of Kaspersky NGFW 1.1 has been released. The solution includes features that increase fault tolerance and the level of protection against cyber threats. The company has also expanded its line of hardware platforms.