Kaspersky

Primary DomainEndpoint Security & Threat Research

HeadquartersMoscow, Russia

Founded1997

DeploymentKaspersky Endpoint Security Cloud/On-Prem, Consumer Security Client, Embedded OS

Vendor & Platform Overview

Kaspersky is a globally recognized cybersecurity vendor renowned for its sophisticated anti-malware detection engine and its elite Global Research and Analysis Team (GReAT), which has uncovered major international cyber-espionage campaigns (including Stuxnet, Flame, and Carbanak). In 2024, the US Department of Commerce prohibited sales of Kaspersky software in the United States due to national security concerns.

Architecture & Detection Telemetry

Kaspersky's anti-malware engine utilizes multi-layered defensive heuristics, deep machine code emulation, and the Kaspersky Security Network (KSN) cloud reputation system. A cornerstone of its endpoint defense is System Watcher, an advanced behavioral monitor that records all system activity in a rollback journal, allowing the engine to automatically undo file modifications, registry edits, and file encryptions caused by malicious payloads.

Mitigated Threat Types & Incident Playbooks

Targeted malware classifications and primary attack vectors defended by Kaspersky's security stack:

Advanced Persistent Threats (APTs) →Sophisticated Banking Trojans →Ransomware File Scramblers →Stealthy Rootkits & Boot Sector Viruses →

SOC Incident Response & Containment Workflow

Recommended operational sequence for security operations teams triaging alerts generated by Kaspersky:

During a confirmed malware event, Kaspersky Endpoint Security isolates the process tree and triggers System Watcher remediation. The engine terminates the malware, restores all encrypted or altered files from the local rollback journal, purges persistence run keys from the registry, and submits payload telemetry to KSN for global signature updates.

Enterprise Security Products

Kaspersky Endpoint Security

Consumer Security Products

Kaspersky Total Security
Kaspersky Anti-Virus

Other Products & Solutions

Non-catalog offerings, enterprise IT platforms, and consumer productivity solutions provided by Kaspersky:

Kaspersky Safe Kids (Parental screen time scheduling, YouTube search filtering, and GPS child tracking)
Kaspersky VPN Secure Connection (Encrypted virtual network tunnel with WireGuard support)
Kaspersky Password Manager (AES-256 cloud-synchronized credential vault)
Kaspersky Battery Life & Device Performance Optimizer
Kaspersky Who Calls (Caller identification and incoming spam call blocker)

Frequently Asked Questions

Why was Kaspersky banned from sales in the United States in 2024?

The US Department of Commerce's Bureau of Industry and Security (BIS) issued a determination prohibiting the sale of Kaspersky software in the US, citing potential risks associated with Russian government jurisdiction and data access.

How does Kaspersky System Watcher roll back ransomware damage?

System Watcher maintains an active behavioral journal of all system modifications made by running applications. If an application begins encrypting user files, System Watcher terminates the process and automatically reverses all file alterations from local backup caches.

What is Kaspersky GReAT?

The Global Research and Analysis Team (GReAT) is Kaspersky's elite threat intelligence division, responsible for uncovering complex state-sponsored cyber espionage campaigns, supply chain exploits, and industrial malware.