Kaspersky reaffirms 100% anti-tampering protection in latest AV-Comparatives test
Kaspersky Next EDR Foundations – represented by Kaspersky Endpoint Security – once again demonstrated 100% tamper protection in the latest focus penetration test by AV-Comparatives.
Attackers often attempt to disable security tools as an initial step in compromising business infrastructure. This makes tamper protection a key mechanism for preventing further compromise of the system. It safeguards the product from end-user and third-party changes, and protects services, processes, files, registry entries, and more from any unauthorized control attempts – even in the context of a privileged user (high or system integrity level). The Kaspersky solution met the strict certification requirements by successfully preventing all tampering attempts during testing.
The Anti-Tampering Test was conducted on Windows 11 to identify weaknesses that could allow adversaries to disable or modify endpoint protection solutions. Participating vendors were not informed in advance about the attack techniques. Only those products that successfully blocked 100% of the attempts received certification and had their reports published.
Kaspersky submitted Kaspersky Endpoint Security for assessment in April 2025 and earned the certification for the second consecutive time. The product effectively blocked all attempts by adversaries to disable, uninstall, or reconfigure the security software in order to prevent updates or enable attacker tools.
"We continuously engage in independent testing to ensure our technologies withstand the latest threats while delivering a seamless experience,' says Alexander Liskin, Head of Threat Research at Kaspersky. 'The Anti-Tampering test is of great value since it puts stress on the product without prior knowledge of attack vectors. We take pride in knowing that Kaspersky Endpoint Security, as part of Kaspersky Next EDR Foundations, has once again achieved top scores.'
Andreas Clementi, Founder and CEO of AV-Comparatives, added: "Our focus tests aim to highlight areas within the product worthy of improvement. Kaspersky has, again and again, displayed excellent resistance against agnostic approaches to tampering, reestablishing itself among the most secure endpoint solutions."
To see the full AV-Comparatives Anti-Tampering test report 2025, please follow the link, and to learn more about the results of 2023, visit this link.
Read more about Kaspersky Next on the website.
About Kaspersky
Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky's deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect individuals, businesses, critical infrastructure, and governments around the globe. The company's comprehensive security portfolio includes leading digital life protection for personal devices, specialized security products and services for companies, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help millions of individuals and over 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Crypto Insight
19 hours ago
- Crypto Insight
Crystal Intelligence shares top insights from the frontlines of the battle against crypto scams
Ensuring top-notch cybersecurity is an essential necessity for businesses to set up shop in the modern business world, and the crypto industry is no exception. Similar to their Web2 counterparts, the crypto landscape fights its own battle against the ever-increasing scams and other security risks. Straightforward scams have transformed into complex, multi-layered operations that pose significant challenges to organizations. As illicit activities become more difficult to crack, the business world dealing with cryptocurrencies is increasingly seeking advanced intelligence and analytics. Crystal Intelligence, a blockchain analytics firm, addresses this need by uncovering hidden patterns in blockchain transactions. The company provides tools that help businesses detect and prevent illicit activities, identify high-risk entities and comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations. By enhancing transparency and security, Crystal Intelligence aims to keep institutions ahead of evolving crypto threats. Leveraging a team of analysts fluent in many regional languages across the Middle East, North Africa and Asia-Pacific, Crystal Intelligence offers insights that are both globally comprehensive and locally precise. This regional expertise helps clients understand on-the-ground risks and regulatory frameworks, enabling them to operate in complex jurisdictions and effectively mitigate region-specific threats. In this interview, Crysta Intelligencel's lead investigator Andrii Sovershyenni and senior investigator Federico Paesano share key insights into the tricky landscape that crypto businesses must navigate and how to be better prepared against crypto scams and frauds. Cointelegraph: Can you tell us about Crystal Intelligence and its mission in the blockchain and crypto space? Federico Paesano: Crystal Intelligence helps organizations understand and manage cryptocurrency through advanced blockchain analytics and compliance solutions. Our tools allow for real-time tracking, risk assessment, and detailed analysis of crypto transactions. This makes us an essential partner for compliance professionals, regulators, and investigators in the crypto field. We also provide training programs. These programs teach clients best practices in the crypto world and equip law enforcement and private sector teams with the skills they need to trace crypto assets. CT: Crypto scams have evolved significantly over the years. What trends or types of scams have you seen rise the most recently? FP: The way criminals use cryptocurrency has changed a lot over the years. They have become more skilled and now use new technologies to avoid being caught. Let's look at the latest changes in this area and see how they have developed. In the past, scammers used simple tactics to hide their activities. They sent Bitcoin (BTC) through multiple addresses to cash out anonymously via exchanges like BTC-e. However, as regulations became stricter and investigators improved their skills, these basic methods became less effective. The rise of KYC policies and the growing cooperation between centralized exchanges and law enforcement made it much harder for bad actors to cash out without leaving a trace. In response, crypto criminals are changing their tactics. They are using more complex methods that take advantage of new products and services in the blockchain space. Swaps, token bridges and decentralized finance (DeFi) protocols have become the tools of choice for criminals seeking to cover their tracks. Scammers and thieves use these technologies to exchange tokens across different blockchains without going through centralized platforms that require identity checks or interaction with authorities. They take advantage of decentralized exchanges (DEXs) and smart contracts to move funds across multiple blockchains quickly, without the oversight that regular exchanges offer. This makes it harder to track illegal activities. Every day we work with law enforcement agencies around the world. They focus on staying updated on new developments, adjusting to changes, and using the latest tools to track and reveal hidden activities. CT: Can you walk us through a scenario where your technology helped identify or prevent a scam? FP: Acting quickly is crucial in every financial investigation. This is especially so when dealing with cryptocurrencies. The difference between stopping a scam and losing money may be mere minutes. This is where Crysta Intelligence's real-time blockchain analytics can help. Our technology tracks and analyzes crypto transactions as they occur, allowing you to spot illegal activity before it's too late. Big news! Crystal is highly commended at the 2024 Regulation Asia Awards for Best #Blockchain Analytics & Investigations Solution! 🎉 Discover how we're advancing blockchain #compliance & #frauddetection: — Crystal Intelligence (@CrystalPlatform) November 5, 2024 We can quickly label suspicious addresses and entities. Our intelligence team identifies addresses linked to crimes like theft, scams, and hacks, and categorizes them within minutes. This fast response is very important. For example, if stolen funds are sent to a cryptocurrency exchange to be cashed out or exchanged for other tokens, our advanced monitoring tools alert the exchange's compliance team as soon as the funds arrive. They can then take action against the illegal source of the funds. In some cases, this alert can help slow down the flow of stolen funds and may even stop criminals from accessing or laundering the money further. We have many cases where we have been asked to help with investigations. When criminals tried to move funds through multiple digital wallets, our expert investigators noticed unusual patterns. They traced the funds and sent out immediate warnings. Often the exchanges involved will work with us to freeze the funds, and block criminals from cashing out, allowing law enforcement to follow the trail of the stolen assets. CT: How does Crystal Intelligence help law enforcement in crypto-related investigations? Are there any notable cases where your team played a key role? FP: When law enforcement investigates crime proceeds in blockchains, several key factors can determine the success of their work. First, it is essential that the tools are easy to use. A powerful tool is not helpful if it confuses investigators with too much complexity or information. Crystal Intelligence has spent a lot of time improving its user interface to ensure even advanced features are easy to navigate. The graphs and visualizations help investigators see complex crypto transaction patterns clearly without being hard to read. This clarity is crucial in fast-paced situations where every moment matters. Second, attribution data is vital to connecting crypto addresses to individuals or organizations. Crystal Intelligence helps law enforcement establish these links by showing relationships between addresses, transactions, and known entities. This then lets investigators follow the money and contact relevant institutions or people. Compliance teams also benefit from this data, as it helps them assess risks in customer transactions and spot potential criminal activity. Finally, the reliability of the data is critical. Crystal's Intelligence Team works very hard to verify data and gather evidence for accurate attribution and risk scores. This is important as law enforcement agencies must be able to trust the data to act effectively, whether it's freezing assets or pursuing further investigations. CT: Blockchain technology is often praised for its transparency, but scams still occur. What are the challenges in identifying and preventing fraudulent transactions on the blockchain? Andrii Sovershennyi: The largest issue we face is speed. Collecting information about fraud is quite straightforward, but doing it quickly can be challenging. Blockchain payments are faster than traditional payments. With quick confirmation times, an attacker can receive payment and convert funds very quickly, leaving little time for anyone to act proactively. At Crystal Intelligence, we are constantly working to speed up how we collect and use labels in our system to help our clients. This challenge gets harder with fraud, as victims often only realize they have been defrauded much later, and they may never get their money back. That's why it is important to raise awareness about common types of fraud and support trustworthy businesses. CT: Looking ahead, what do you think the future holds for blockchain security? Are there any emerging threats on the horizon that we should be aware of? AS: Blockchain security can be very challenging. Many people, including myself, believe that keeping your own crypto instead of relying on exchanges is safer. However, it can be risky if you lose your private key or if it gets stolen. It's difficult to comment on emerging threats. But the general rule is that criminals innovate constantly. Attackers are becoming more skilled and have pulled off impressive heists against well-protected targets. Many of these attacks use social engineering, like impersonating customer service, and modern AI tools can help them create convincing fake voices, images, and videos. I think the focus on security will shift from technology to laws and regulations. Services will need to prove that they take security seriously, and there may be specific rules about how they handle custody. CT: Finally, what advice would you give to crypto investors or businesses to better protect themselves from falling victim to scams? AS: Many factors are involved when businesses want to work with cryptocurrency. To start, they should follow the recommendations in open standards like the Cryptocurrency Security Standard (CCSS). This standard offers good policies and guidance. There are also many firms that can help businesses create and apply the necessary security measures. For consumers, it's best to choose a licensed and regulated cryptocurrency exchange. Instead of just looking for the 'best cryptocurrency exchange near me', check the list of authorized firms from national financial regulators. While this doesn't guarantee safety, being regulated means these firms must follow certain rules. Additionally, you can visit the International Organisation of Security Commissions (IOSCO) to find information on investor protection. They have a list of services that warn about potential issues. Their site also has many valuable free resources for learning about investments, which can help you assess the opportunities you come across. Crystal Intelligence's website provides a wide range of resources for victims of cryptocurrency scams and helps businesses improve their security through education and awareness. Source:
Zawya
2 days ago
- Zawya
South Africa is a prime target for ransomware attacks: How to safeguard your system?
Ransomware attacks have become a significant threat to South African businesses, with the country emerging as a top target in Africa. The prevalence of these attacks is driven by a combination of factors, including the rapid digital transformation of businesses, the increasing sophistication of cybercriminals, and the economic incentives for attackers. South Africa's relatively strong economy and high levels of digital adoption make it an attractive target for ransomware operators, who know that businesses and institutions here are more likely to pay ransoms to recover critical data. Why South Africa is a hotspot for ransomware South Africa's position as a regional economic hub means that its businesses and government institutions store vast amounts of sensitive data online. Cybercriminals are well aware of this, and they exploit vulnerabilities in outdated systems, weak passwords, and human error to infiltrate networks. For instance, a healthcare provider could fall victim to a ransomware attack if its systems are not updated with the latest security patches, allowing attackers to encrypt patient records and demand a hefty ransom. Similarly, a financial institution might be targeted if employees click on a phishing email, granting attackers access to the network. Common tactics used by ransomware operators Ransomware attacks often begin with phishing emails, where attackers use social engineering to trick employees into clicking malicious links or downloading infected attachments. Once inside the network, the ransomware spreads rapidly, encrypting files and rendering them inaccessible. Attackers then demand payment in exchange for decryption keys. In some cases, they also steal sensitive data and threaten to leak it if the ransom is not paid. Another common tactic is using exploit kits, which scan systems for vulnerabilities and deploy ransomware payloads without the need for user interaction. For example, a manufacturing company could be targeted through a compromised website, where an exploit kit silently installs ransomware on its systems. The cost of ransomware attacks The financial impact of ransomware attacks can be devastating. Beyond the ransom itself, businesses face costs related to downtime, lost revenue, and reputational damage. A retail chain might lose millions of rands in sales during a ransomware-induced shutdown, while a logistics company could suffer delays in delivering goods, leading to customer dissatisfaction. Moreover, the recovery process could take weeks or months, compounding the financial losses. Prevention is key: building resilient infrastructure Businesses must adopt a proactive approach to cybersecurity to protect themselves from ransomware. This starts with regular employee training to recognise phishing attempts and other social engineering tactics. Companies should also implement robust password policies and multi-factor authentication (MFA) to reduce the risk of unauthorised access. Keeping software and systems up to date is crucial, as outdated systems are a common entry point for ransomware. Partnering with an experienced IT security provider can make a significant difference in preventing ransomware attacks. An expert partner can help businesses identify vulnerabilities, implement advanced monitoring tools, and develop a comprehensive incident response plan. For example, a small business might work with an IT partner to deploy endpoint protection software that detects and blocks ransomware before it can encrypt files. Additionally, regular backups of critical data, stored securely offsite, can ensure businesses recover quickly without paying a ransom. A multi-layered defence strategy A multi-layered approach to cybersecurity is essential for safeguarding against ransomware. This means having multiple layers of security measures in place, each one adding a different level of protection, such as firewalls, email security, and intrusion detection systems, which can be used to block attacks at the perimeter. Inside the network, businesses should use tools that monitor for suspicious activity and automatically respond to potential threats. For example, a financial institution might use machine learning algorithms to analyse network traffic and detect anomalies that could indicate a ransomware attack. While prevention is the best defence, cyber insurance can provide additional protection. Policies that cover ransomware attacks can help businesses recover financially from the costs of downtime, data recovery, and ransom payments. However, insurers are increasingly scrutinising the cybersecurity measures of their clients, meaning businesses with stronger defences might benefit from lower premiums. Ransomware attacks are a growing threat to South African businesses but are not inevitable. By investing in robust cybersecurity measures, training employees, and working with expert IT partners, businesses can significantly reduce their risk of becoming a target. Prevention is key, and a proactive approach to cybersecurity can help ensure that businesses remain resilient in this evolving threat.
Zawya
2 days ago
- Zawya
UAE fund buys $100mln of Trump's World Liberty tokens
A United Arab Emirates-based fund has bought $100 million worth of digital tokens issued by World Liberty Financial, the crypto venture of U.S. President Donald Trump's family, becoming its largest publicly known investor. Aqua 1 Foundation said in a statement on Thursday its purchase of the tokens, known as $WLFI, sought to speed up the creation of a "blockchain-powered financial ecosystem" with stablecoins and tokenised traditional assets at its heart. A spokesperson for World Liberty confirmed the investment to Reuters. A so-called governance token, $WLFI cannot be traded but gives holders the right to vote on changes to the business' underlying code. World Liberty said this week it was "working behind the scenes" to make the token transferable. "WLFI and Aqua 1 will jointly identify and nurture high-potential blockchain projects together," Aqua 1 founding partner Dave Lee said in the statement. The fund's investment and compliance teams would help World Liberty expand in South America, Europe and Asia, it added. Despite its investment, Aqua 1 maintains a minimal online presence. Its X account has only three posts and approximately 1,120 followers while its website was created on May 28, according to data from two web domain trackers. World Liberty also plans to support the launch of a separate Aqua 1 fund aimed at boosting the "digital economy transformation" in the Middle East through blockchain and artificial intelligence, the statement said. Aqua 1 did not immediately respond to a request for comment, and the World Liberty spokesperson had no further immediate comment. Launched two months before the 2024 U.S. presidential election by Trump and his business partners, World Liberty has yielded hundreds of millions of dollars in revenue for the Republican president's family business. World Liberty has drawn criticism from Democratic lawmakers and government ethics watchdogs over potential conflicts of interest. The Trump Organization has said the president's investments, assets and business interests are held in a trust managed by his children. World Liberty aims to open access to financial services via digital tokens, without intermediaries such as banks. It has launched a stablecoin called USD1 that was bolstered in May when an Abu Dhabi investment firm chose it for a $2 billion investment in giant crypto exchange Binance. (Reporting by Tom Wilson in London; Editing by Frances Kerry and Louise Heavens)
