The most used lateral movement hacking tools across enterprise infrastructures


The statistics compiled from detection alerts* within Kaspersky Anti Targeted Attack (KATA) reveal the hacking tools most often used for lateral movement across enterprise infrastructures, highlighting the pressing need for reliable network security solutions to protect corporate environments.

Recent investigations into cyber-espionage groups show that attackers increasingly avoid detectable malware, choosing instead to blend into legitimate corporate network traffic. By weaponizing dual-use tools and administrative utilities already present in the system, they move laterally across the domain undetected to harvest credentials and locate high-value assets. In this era of silent intrusion, Kaspersky shares insights into the most frequently used hacking tools to help organizations defend their networks.

For a decade, KATA, Kaspersky’s mature NDR solution, has been delivering comprehensive anti-APT protection. It features advanced threat detection, in-depth network traffic analysis, and centralized incident response to ensure full visibility across the entire network. Equipped with nearly 12,500 network detection rules in its database, KATA detects an average of 312,705 potential attacks daily.

Read more…
Source:  Kaspersky


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • French bank hit by cyberattack, losses estimated at €118 million

    November 5, 2026

    French regional bank Crédit Mutuel Arkéa said on Wednesday, November 4, that it had been the victim of a cyberattack that allowed fraudulent transactions, which reports claim amounted to €100 million. The bank, an arm of French financial services giant Crédit Mutuel in western France, said the attack was “under control” and there would be ...

  • Norway’s aid agency pwned and all users’ data is stolen

    November 5, 2026

    Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway’s assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least three organizations’ applications was “misdirected.” The ...

  • Cyberattack targets French blood banks

    November 4, 2026

    A cyberattack on several French blood banks sought to raise temperatures to extremely high levels but was thwarted before it could do any damage to blood products or samples, authorities said. The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were ...

  • Chrome 157 fixes 213 security issues, including 7 critical flaws

    November 4, 2026

    On November 3, Google issued Chrome 157 to the stable channel for Windows, Mac and Linux. The update is rolling out over the coming days and weeks. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 157.0.8103.38/.39 for Windows and Mac and 157.0.8103.38 for Linux. It includes 213 security fixes, including seven vulnerabilities rated Critical by ...

  • DOJ warns FBI data breach likely extends to Justice Department employees

    November 4, 2026

    A major data breach of FBI systems likely also affected staffers across the Justice Department, according to a memo obtained by POLITICO. FBI investigators determined in September that a hack of a bureau jobs portal was a “major” cyber incident, allowing hackers to steal personal information on thousands of FBI agents, including Social Security numbers, birth ...

  • The most used lateral movement hacking tools across enterprise infrastructures

    November 2, 2026

    The statistics compiled from detection alerts* within Kaspersky Anti Targeted Attack (KATA) reveal the hacking tools most often used for lateral movement across enterprise infrastructures, highlighting the pressing need for reliable network security solutions to protect corporate environments. Recent investigations into cyber-espionage groups show that attackers increasingly avoid detectable malware, choosing instead to blend into legitimate ...