<?xml version="1.0"?>
<rss version="2.0"><channel><title>News on Dr.Web products</title><link>https://news.drweb.com/news/</link><description>Doctor Web news - News on Dr.Web products</description><image><url>https://st.drweb.com/static/drweb_logo_en.gif</url><link>https://news.drweb.com/news/</link><title>Dr.Web anti-virus</title></image><item><guid>https://news.drweb.com/show/?i=15134&amp;lng=en</guid><title>Dr.Web for personal computers receives SKD AWARDS product excellence distinction</title><link>https://news.drweb.com/show/?i=15134&amp;lng=en&amp;c=6</link><pubDate>Tue, 24 Mar 2026 16:18:54 GMT</pubDate><description>&lt;p&gt;&lt;newslead&gt;The comprehensive antivirus solution &lt;a href="https://products.drweb.com/win/security_space?os=windows32#ss_demo"&gt;Dr.Web Security Space&lt;/a&gt; was once again given an SKD AWARDS industry honour. The antivirus was recognised as best product in the “Personal Computer Security” category.&amp;nbsp;&lt;/newslead&gt;&lt;/p&gt;&lt;p&gt;Doctor Web has managed to win this award three years in a row. Back in &lt;a href="https://news.drweb.com/show/?i=14677"&gt;2023&lt;/a&gt;, Dr.Web Security Space 12.0 for Windows prevailed in the Personal Computer Security category; in &lt;a href="https://news.drweb.com/show/?i=14800"&gt;2024&lt;/a&gt;, the antivirus solution for desktops and laptops was once again recognised as best product, whilst Dr.Web Mobile Engine SDK came out on top in the Antivirus Engines category.&amp;nbsp;&lt;/p&gt;&lt;p&gt;SKD AWARDS is hosted annually by SKD Labs, an internationally recognised independent information security testing and certification laboratory. Unofficially, this award is often referred to as the “Oscar for Cybersecurity products”. It is regarded as one of the key credibility markers that indicate superior quality.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Participating products undergo a series of tests that evaluate their features, performance, technical innovation, behaviour in real-life scenarios, and ability to detect and eliminate threats.&lt;/p&gt;&lt;div class="img"&gt;&lt;a href="https://st.drweb.com/static/f2_admin/drweb-ss.jpg" data-fancybox=""&gt;&lt;img src="https://st.drweb.com/static/new-www/news/2026/drweb-ss.jpg" alt="#drweb"&gt;&amp;nbsp;&lt;/a&gt;&lt;/div&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15095&amp;lng=en</guid><title>We’ve updated Dr.Web FixIt!’s End User License Agreement!</title><link>https://news.drweb.com/show/?i=15095&amp;lng=en&amp;c=6</link><pubDate>Mon, 29 Dec 2025 13:33:13 GMT</pubDate><description>&lt;p&gt;&lt;newslead&gt;Dr.Web FixIt!’s End User License Agreement has been updated. The latest EULA version is available at &lt;a href="https://license.drweb.com/agreement"&gt;https://license.drweb.com/agreement&lt;/a&gt;&amp;nbsp;&lt;/newslead&gt;&lt;/p&gt;&lt;p&gt;Dr.Web FixIt! allows information security experts to conduct in-depth analyses of Windows PCs and servers remotely, neutralise identified threats, and resolve potential vulnerabilities. It is distinguished for its ability to detect brand-new malware, including malicious programs that perpetrators use in targeted attacks and can’t be identified by other cybersecurity tools.&lt;/p&gt;&lt;p&gt;Dr.Web FixIt! is primarily designed for information security professionals tasked with monitoring IT infrastructures and analysing cybersecurity incidents. However, even if a company doesn't employ an actual SOC team, the solution can still be used to identify threats on desktops, laptops and/or servers, and eliminate them.&amp;nbsp;&lt;br&gt;If necessary, our experts will help you analyse the data gathered by Dr.Web FixIt! To get additional assistance and expertise from Doctor Web, you will need to purchase an expert support certificate.&lt;/p&gt;&lt;p&gt;You can purchase a Dr.Web FixIt! license from Doctor Web's &lt;a href="https://partners.drweb.com/find_partner/?lng=en"&gt;partners.&amp;nbsp;&lt;/a&gt;&lt;br&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15094&amp;lng=en</guid><title>A major centralised administration server update for Dr.Web Enterprise Security Suite and Dr.Web Industrial</title><link>https://news.drweb.com/show/?i=15094&amp;lng=en&amp;c=6</link><pubDate>Fri, 12 Dec 2025 11:13:26 GMT</pubDate><description>&lt;p&gt;&lt;newslead&gt;Doctor Web is rolling out a major server component update for Dr.Web Enterprise Security Suite and Dr.Web Industrial 13.0.1.202511120 that will become available on December 15, 2025. The biggest change being introduced is for the Application Control component to further improve the security of protected devices.&lt;/newslead&gt;&lt;/p&gt;&lt;p&gt;The update package will also deliver other tweaks and feature upgrades. Those include additional functional analysis criteria for Dr.Web Enterprise Security Suite and Dr.Web Industrial:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;In the “Application launch” category, Dr.Web can be set to stop office suite programs and mail clients from creating child processes. &amp;nbsp;This can reduce the risk of infection via malicious documents and emails without interfering with the user experience.&lt;/li&gt;&lt;li&gt;In the “Launch of script interpreters” category, new rules are available to prevent scripts from being run from office suite apps and email clients and to block certain AutoIt, JavaScript and Python scripts. These restrictions will protect systems from cyberattacks that leverage script interpreters and help prevent dubious automation routines from being created.&lt;/li&gt;&lt;li&gt;The “Driver loading” category can now be used to prevent non-WHQL drivers from being installed. This option ensures that unsigned modules can't be used and potentially dangerous code won't be loaded into the kernel.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;The updated set of rules provides cybersecurity administrators with additional flexible tools for preventing malicious activity and increasing their infrastructure’s resilience in the face of modern threats.&lt;br&gt;The update also addresses a number of identified issues, which include:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;A Dr.Web server update error that could occur in systems with limited CPU and memory capacity.&lt;/li&gt;&lt;li&gt;An issue preventing the repository product “Content filter databases for UNIX” from being updated if the “Update only bases” option was enabled in the Control Center’s Update restrictions section.&lt;/li&gt;&lt;li&gt;Possible interference with routine DNS response cache updating.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;A detailed changelog is available &lt;a href="https://f2.drweb.com/get+meta+file/?k=4f637d7902fe78c8169021c2e3dcf8d4&amp;amp;sdl=en&amp;amp;sdf=t"&gt;here&lt;/a&gt;.&amp;nbsp;&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15084&amp;lng=en</guid><title>Dr.Web CureIt! can now see what malware is trying to hide</title><link>https://news.drweb.com/show/?i=15084&amp;lng=en&amp;c=6</link><pubDate>Thu, 20 Nov 2025 08:00:25 GMT</pubDate><description>&lt;p&gt;&lt;newslead&gt;Doctor Web has updated its free utility Dr.Web CureIt! to introduce a unique feature—the ability to scan files and folders that virus makers add to antivirus exclusions lists. &amp;nbsp;This is a major step in tackling more sophisticated threats that seek to disable information security software to ensure they operate unhindered in the system.&lt;/newslead&gt;&lt;/p&gt;&lt;p&gt;The new feature was inspired by the success of Dr.Web FixIt!—the product employed by Doctor Web's experts to investigate information security incidents and eliminate complex infections. Many malicious programs attempt to add their own executable files to the antivirus exclusions list as soon as they get into a system. By doing so, they deceive the antivirus and make it ignore malicious objects, which allows attackers to steal data, encrypt files or use the device as a botnet node.&lt;/p&gt;&lt;p&gt;How the new feature works:&lt;/p&gt;&lt;ol&gt;&lt;li&gt;When the scan is started, Dr.Web CureIt! will automatically examine the exclusions lists of Microsoft Defender or any other antivirus found in the system.&lt;/li&gt;&lt;li&gt;Then all files and folders found on these lists are thoroughly scanned by the Dr.Web antivirus engine.&lt;/li&gt;&lt;li&gt;If a malicious object is detected among the exclusions, Dr.Web CureIt! notifies the user and removes the threat.&lt;/li&gt;&lt;/ol&gt;&lt;p&gt;This feature can be of vital importance for ordinary users who may be unaware that their security software has been compromised. Now, even if a trojan is hiding in plain sight, Dr.Web CureIt! will be able to expose and neutralize it.&lt;/p&gt;&lt;h3&gt;What’s coming next: emergency expert aid for Linux&lt;/h3&gt;&lt;p&gt;Driven by the success of Dr.Web FixIt! under Windows, Doctor Web is also planning to release a full-blown version of the service for Linux to help information security professionals investigate cyberattacks on corporate infrastructures.&lt;br&gt;Currently you can use Dr.Web FixIt! for Linux to collect system information and send it to our technical support engineers. The utility is now available at &lt;a href="https://free.drweb.ru/sysinfo/"&gt;https://free.drweb.ru/sysinfo/&lt;/a&gt;&amp;nbsp;&lt;br&gt;The new service’s design features will subsequently be used to create a Dr.Web CureIt! version that will enable ordinary users to quickly scan their Linux machines and eliminate any consequences of infection.&lt;/p&gt;&lt;p&gt;You can download the updated version of Dr.Web CureIt! free of charge on our official website: &lt;a href="https://free.drweb.com/download+cureit+free/"&gt;https://free.drweb.com/download+cureit+free/&lt;/a&gt;&lt;/p&gt;&lt;p&gt;*Available free of charge for home use only.&lt;br&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15082&amp;lng=en</guid><title>Protect your loved ones from phone scams with the new Anti-scam feature</title><link>https://news.drweb.com/show/?i=15082&amp;lng=en&amp;c=6</link><pubDate>Tue, 18 Nov 2025 08:45:29 GMT</pubDate><description>&lt;p&gt;&lt;newslead&gt;&lt;a href="https://products.drweb.com/home/family_security/?lng=en"&gt;Dr.Web Family Security&lt;/a&gt;—a mobile app that helps you keep your children and adult family members safe in the digital world—has been enhanced to include the Anti-scam feature, providing even more reliable protection from phone scams and blackmail.&amp;nbsp;&lt;/newslead&gt;&lt;/p&gt;&lt;h3&gt;&lt;strong&gt;How the Anti-scam works&lt;/strong&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li&gt;It helps you keep your finger on the pulse. As the family manager, you can set a duration limit for calls from numbers that are either hidden or not found on the Contacts list. For example, you can keep them as short as just one minute. That’s sufficient time to say “hello” but not nearly enough time to coerce the target into divulging a valuable piece of information.&lt;/li&gt;&lt;li&gt;It aborts scammer attacks at their outset. The shorter the conversation, the lower the chance of an attacker being able to gain your family member’s trust to obtain transaction confirmation codes from SMS; bank card data; or passwords. You’re taking away their most vital resource —time.&lt;/li&gt;&lt;li&gt;It makes sure your family members will never miss the things that matter. If an important call gets cut short by the filter, simply add the number to the Allowed lists—and all subsequent calls from that number will never get interrupted by Dr.Web. Maintain full control and stay connected.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;This release also incorporates stability and performance upgrades for the app.&amp;nbsp;&lt;br&gt;The latest Dr.Web Family Security version is already available on Google Play and will appear on Doctor Web’s site drweb.com and on AppGallery shortly. Keep an eye on your update notifications!&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15079&amp;lng=en</guid><title>Updated version of Dr.Web for mobile devices comes with a smart security system</title><link>https://news.drweb.com/show/?i=15079&amp;lng=en&amp;c=6</link><pubDate>Fri, 07 Nov 2025 09:00:00 GMT</pubDate><description>&lt;newslead&gt;Updated antivirus products for protecting Android-based smartphones, tablets and other mobile devices have been released. The main improvements concern the automation of the protection and operational stability.&lt;/newslead&gt;&lt;h3&gt;What makes this release special?&amp;nbsp;&lt;/h3&gt;&lt;p&gt;The new automated threat-processing feature allows Dr.Web solutions to remove malicious objects and to block suspicious links or isolate potentially dangerous applications without delays and manual user intervention.&amp;nbsp;&lt;/p&gt;&lt;h3&gt;What does this mean for users?&lt;/h3&gt;&lt;p&gt;Now users of personal devices do not need to monitor all of the threat notifications as they did before because manual responses can be completely eliminated. This feature has been designed to ensure that the antivirus product’s response won't depend on the user's response to system notifications about detected threats and the actions that have been performed with them. The intelligent system, developed by Doctor Web specialists, independently eliminates threats in real time in accordance with the parameters specified for responding to certain types of malware.&amp;nbsp;&lt;br&gt;Corporate users will especially enjoy this feature. The automated removal of malicious objects and the blocking of suspicious links and many other actions occur instantly without the direct participation of administrators. This feature is also supported by the Control Center.&lt;/p&gt;&lt;h3&gt;Administration has become even more convenient&lt;/h3&gt;&lt;p&gt;This update delivers the ability to centrally manage the actions of the Scanner and SpIDer Guard components when various types of threats are detected on Android-based devices. Now the administrator can configure how the Dr.Web agent will respond to threats — notify, delete or ignore them, depending on the category.&lt;/p&gt;&lt;div class="alert"&gt;&lt;p&gt;&lt;strong&gt;Important notice!&amp;nbsp;&lt;/strong&gt;&lt;/p&gt;&lt;/div&gt;&lt;p&gt;Starting with the new version, support is no longer available for Android version 4.4. Please pay attention to this when updating the product.&amp;nbsp;&lt;br&gt;If you are using the Dr.Web Security Space version for mobile devices and downloaded it from Doctor Web's official website, you must completely reinstall the application in order to update it — download the latest version of the agent and install it.&amp;nbsp;&lt;br&gt;For users of Dr.Web Security Space for mobile devices who downloaded the application from Google Play and who are using Dr.Web subscriptions or Dr.Web Mobile Security Suite, the update will proceed as usual.&lt;br&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15080&amp;lng=en</guid><title>Dr.Web Enterprise Security Suite and Dr.Web Industrial centralized management servers have been updated</title><link>https://news.drweb.com/show/?i=15080&amp;lng=en&amp;c=6</link><pubDate>Fri, 07 Nov 2025 09:00:00 GMT</pubDate><description>&lt;newslead&gt;A new update for Dr.Web Enterprise Security Suite and Dr.Web Industrial servers has been released. The new version delivers stability improvements and new tools for centrally managing actions when threats are detected on Android devices. To gain all of the new benefits and for correct system operation, users are recommended to update their servers to the latest version.&lt;/newslead&gt;&lt;p&gt;The new version of the Dr.Web Enterprise Security Suite server includes changes that improve security-system management. Changes have also occurred in Dr.Web for Android mobile devices — these ensure that the Control Center has full control of the antivirus protection.&lt;/p&gt;&lt;p&gt;This update delivers the ability to centrally manage the actions of the Scanner and SpIDer Guard components when various types of threats are detected on Android devices. Now the administrator can configure how the Dr.Web agent will respond to threats — notify, delete or ignore them, depending on the category.&lt;/p&gt;&lt;p&gt;The settings previously presented as the parameters "Scan for adware" and "Scan for potentially dangerous programs" have been replaced by a new mechanism for customising actions. If these scan parameters are disabled, after the update, the default &amp;nbsp;action "Ignore" will be applied to the corresponding programs. In other cases, the "Report" action is used.&lt;/p&gt;&lt;div class="alert"&gt;&lt;p&gt;&lt;strong&gt;Important notice for users&amp;nbsp;&lt;/strong&gt;&lt;/p&gt;&lt;/div&gt;&lt;p&gt;To take advantage of the full range of the new version’s features and to ensure that the protection components operate correctly, the centralized management servers must be updated to the latest version.&lt;br&gt;The update is available for download via the management console’s web interface.&lt;br&gt;If antivirus network administrators have any questions on how to configure or plan the update, they can contact our Technical Support Service for a consultation.&lt;br&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15073&amp;lng=en</guid><title>Dr.Web solutions support all versions of Windows, starting with Windows XP</title><link>https://news.drweb.com/show/?i=15073&amp;lng=en&amp;c=6</link><pubDate>Thu, 30 Oct 2025 15:23:15 GMT</pubDate><description>&lt;p style="text-align:justify;"&gt;&lt;strong&gt;Because Microsoft officially discontinued its support for Windows 10 as of October 14, 2025, Doctor Web is informing its users and partners of the following.&lt;/strong&gt;&lt;/p&gt;&lt;p style="text-align:justify;"&gt;&lt;br&gt;&lt;strong&gt;Support for Dr.Web products installed on computers running Windows 10&lt;/strong&gt;&lt;br&gt;Currently, all versions of Dr.Web solutions are fully compatible with Windows 10. We confirm that:&lt;/p&gt;&lt;ul style="list-style-type:disc;"&gt;&lt;li&gt;&lt;p style="text-align:justify;"&gt;Technical support and updates for Dr.Web antivirus databases and software components are available as usual;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p style="text-align:justify;"&gt;With Microsoft support officially discontinued, Doctor Web is continuing to ensure that its products are compatible with Windows 10—for as long as this is possible, taking into account security requirements.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p style="text-align:justify;"&gt;&lt;strong&gt;Long-term support for all versions, starting with Windows XP&lt;/strong&gt;&lt;br&gt;Even though many Windows versions lack official support, they are still actively being used in individual infrastructures—including in industry, automated control systems and specialized corporate environments.&lt;br&gt;Taking into account the needs of these users, Doctor Web is continuing to provide support for all OS versions, starting with Windows XP, in current versions of Dr.Web solutions for PC protection.&amp;nbsp;&lt;br&gt;&amp;nbsp;&lt;/p&gt;&lt;div class="alert"&gt;&lt;p style="text-align:justify;"&gt;! Please note that using outdated versions of OSs is associated with certain risks.&lt;/p&gt;&lt;/div&gt;&lt;ul style="list-style-type:disc;"&gt;&lt;li&gt;&lt;p style="text-align:justify;"&gt;The lack of security updates leaves vulnerabilities unclosed.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p style="text-align:justify;"&gt;Compatibility issues connected with modern versions of application software (browsers, drivers, etc.).&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p style="text-align:justify;"&gt;Increased risk of compromise—exploits for older operating systems are widely available in open sources, and cybercriminals are still carrying out attacks on vulnerable protocols (SMBv1, TLS 1.0, etc.).&amp;nbsp;&lt;br&gt;&amp;nbsp;&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p style="text-align:justify;"&gt;&lt;strong&gt;Even if your company's business processes are critically dependent on these systems, it is strongly recommended that you plan to migrate to modern operating systems that provide security updates.&amp;nbsp;&lt;/strong&gt;&lt;br&gt;For any period that you are using outdated OS versions, you need to isolate nodes containing OS data from the Internet and your main corporate network segments through the use of VLAN, DMZ or firewalls, and you must carefully scan the entire data exchange process involving these systems for malicious content.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15075&amp;lng=en</guid><title>Get structured information about targeted attacks: Dr.Web vxCube reports merged with the MITRE ATT&amp;CK matrix</title><link>https://news.drweb.com/show/?i=15075&amp;lng=en&amp;c=6</link><pubDate>Wed, 22 Oct 2025 14:23:09 GMT</pubDate><description>&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Doctor Web is updating Dr.Web vxCube. The upcoming release will allow the sandbox's reports to be linked with the MITRE ATT&amp;amp;CK Enterprise matrix. As a result, analysis results will be integrated into the knowledge base of adversarial tactics and techniques to provide researchers with a more accurate assessment of samples being examined and allow them to recreate the attack timeline. The MITRE ATT&amp;amp;CK framework contains information about threat actors’ tactics and techniques. Cybersecurity experts use the knowledge base to further enhance the security of IT infrastructures.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;This latest Dr.Web vxCube version won't merely provide researchers with a report on the activity of a potential threat but will also help them determine the sequence of steps taken to penetrate and infect a system. This information may subsequently be used to understand how current security policies should be changed to tighten security. Furthermore, the data on identified tactics and techniques can help create new SOC and SIEM rules for neutralising a specific threat.&lt;/p&gt;&lt;p&gt;To better demonstrate how information security professionals will benefit from the upcoming update, let’s examine the report generated after a common encryption ransomware sample was analysed with the new Dr.Web vxCube version.&lt;/p&gt;&lt;p&gt;&lt;video controls=""&gt;
       &lt;source src="https://st.drweb.com/static/new-www/news/2025/october/vxcube/v1.mp4" type="video/mp4"&gt;
    &lt;/video&gt;&lt;/p&gt;&lt;ol&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Initial Access&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Technique: Replication Through Removable Media&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;The attacker downloaded the malware to a removable data storage device that became the source of the infection. Perhaps, the employee used their own infected USB stick.&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Execution&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Technique: Windows Management Instrumentation (WMI)&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;As soon as the flash drive gets connected to a computer, the autorun routine is triggered (for example, a modified autorun.inf file could be used for this). The encryption ransomware uses WMI to activate its payload. It employs a legitimate administration tool (WMI) to evade detection by less advanced antiviruses.&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Persistence &amp;amp; Privilege Escalation&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Technique: Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;To persist after a system restart and gain control as soon as a user logs in, the ransomware adds itself to the autostart app list. To accomplish this, it creates a corresponding registry entry or copies itself into the autostart folder. At this step, the trojan is often able to elevate its privileges to match those of the current user account.&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Defense Evasion&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Technique: Indicator Removal: File deletion&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;Once the ransomware has gained a foothold in the system, it starts covering its tracks. It removes its original executable file from the USB stick or the temporary folder to make it harder for antivirus experts to detect and analyze it.&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Lateral Movement&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Technique: Replication Through Removable Media&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;The malicious program does not confine itself to operating on a single compromised device. It monitors the system to determine when other USB drives get connected and infects them as well. Now, if an employee takes away their flash drive and connects it to another computer, the attack will be repeated. This is how the ransomware traverses air gaps within an infrastructure.&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p class="p1"&gt;&lt;span class="s1"&gt;&lt;strong&gt;Tactics: Impact&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;&lt;span class="s1"&gt;&lt;strong&gt;Techniques: Inhibit System Recovery и Data Encrypted for Impact&lt;/strong&gt;&lt;/span&gt;&lt;br&gt;Inhibit System Recovery: the ransomware attempts to destroy or encrypt point-in-time file copies created by the Volume Shadow Copy Service (VSS) to prevent the victim from recovering their data by using standard Windows tools. &amp;nbsp;&lt;br&gt;Data Encrypted for Impact: the malware uses strong encryption algorithms to encrypt all important files (documents, photos, database files) on the computer. After that, a message appears on the screen demanding that a ransom be paid in exchange for the decryption key.&lt;/p&gt;&lt;/li&gt;&lt;/ol&gt;&lt;p&gt;A cybersecurity professional can use this information to implement the following measures in order to prevent systems from getting compromised by similar malicious programs:&lt;/p&gt;&lt;ul class="list"&gt;&lt;li&gt;Impose tighter restrictions on the use of USB storage media (disable the autorun feature, only allow encrypted corporate flash drives to be connected to the computers).&lt;/li&gt;&lt;li&gt;Configure system monitoring tools to detect suspicious Run Registry keys and attempts to run malicious scripts with WMI.&lt;/li&gt;&lt;li&gt;Divide the network into multiple subnets to mitigate a threat’s ability to spread across the infrastructure.&lt;/li&gt;&lt;li&gt;Set up regular and secure data backups to ensure that a recovery option is always available.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;The new feature is available in both cloud-based and on-premise Dr.Web vxCube versions for Linux and Windows VMs. Only the English language is supported. Doctor Web intends to add MITRE ATT&amp;amp;CK support for Android threat analysis in the future.&lt;/p&gt;&lt;p&gt;The updated Dr.Web vxCube version will also include the current sandbox documentation. The cloud-based version of Dr.Web vxCube will be unavailable on October 23, 2025, between 10.00-11.00 GMT during scheduled updating.&lt;/p&gt;&lt;p&gt;To update the on-premise version, download the latest Dr.Web vxCube distribution and VM images and follow the installation guidelines found in the &lt;a href="https://cdn-download.drweb.com/pub/drweb/vxcube/1.6/onPremise/documentation/admin/html/ru/index.html?dw_update_vxcube.htm"&gt;documentation&lt;/a&gt; to reinstall the software. Use the &lt;a href="https://download.drweb.com/?lng=en"&gt;Download Wizard&lt;/a&gt; to get the latest Dr.Web vxCube version.&lt;/p&gt;&lt;p&gt;Dr.Web vxCube is a suspicious file analysis sandbox. It can help you identify indicators of compromise, prevent cyberattacks and eliminate advanced persistent threats. The sandbox is available as a cloud-based service and an on-premise solution.&lt;/p&gt;&lt;p&gt;Use this &lt;a href="https://download.drweb.com/vxcube/?lng=en"&gt;form&lt;/a&gt; to receive demo access to the cloud-based version of Dr.Web vxCube.&lt;/p&gt;&lt;p&gt;You can purchase a license for Dr.Web vxCube from &lt;a href="https://partners.drweb.com/find_partner/?lng=en"&gt;Doctor Web's partners&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;This update contains the MITRE ATT&amp;amp;CK® knowledge base. The knowledge base is being used and distributed under the MITRE Corporation's license.&lt;/p&gt;&lt;p&gt;© 2025 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.&lt;/p&gt;&lt;p&gt;The MITRE ATT&amp;amp;CK® Terms of Use are available at &lt;a href="https://attack.mitre.org/resources/legal-and-branding/terms-of-use/"&gt;https://attack.mitre.org/resources/legal-and-branding/terms-of-use/&lt;/a&gt;.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15054&amp;lng=en</guid><title>We’ve updated Dr.Web vxCube’s End User License Agreement</title><link>https://news.drweb.com/show/?i=15054&amp;lng=en&amp;c=6</link><pubDate>Fri, 17 Oct 2025 07:54:03 GMT</pubDate><description>&lt;p&gt;&lt;strong&gt;Dr.Web vxCube examines suspicious files and their behaviour by running them in a sandbox, making it possible to detect signs of infection and promptly repel attacks, including those involving advanced persistent threats.&lt;/strong&gt;&lt;br&gt;Dr.Web vxCube can analyse files meant to be run under Windows and Linux, as well as APK files (Android) and Docker containers.&lt;br&gt;The suspicious file analyser (sandbox) Dr.Web vxCube is available as a cloud-based service and an on-premise solution. &amp;nbsp;Optionally, a custom Dr.Web CureIt! build can also be provided to cure a specific malicious file.&lt;br&gt;The updated license agreement is available at &lt;a href="https://license.drweb.com/agreement/"&gt;https://license.drweb.com/agreement/&lt;/a&gt;.&lt;br&gt;You can purchase a license for Dr.Web vxCube from Doctor Web's &lt;a href="https://partners.drweb.com/find_partner/?lng=en"&gt;partners&lt;/a&gt;.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15030&amp;lng=en</guid><title>Test-drive Dr.Web Security Space on your desktop or laptop for two months for just $6</title><link>https://news.drweb.com/show/?i=15030&amp;lng=en&amp;c=6</link><pubDate>Wed, 02 Jul 2025 02:00:00 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;July 2, 2025&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Why is this better than a free one-month trial? The reason is simple: you're getting a 2-month license that does include technical support.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;Visit the &lt;a href="https://www.drweb.com/landing/test2months?utm_source=drweb_site&amp;utm_medium=demo_win&amp;utm_campaign=test2months"&gt;promo page&lt;/a&gt; to get the test drive and stop worrying about trojans, hackers and fraudulent sites. Once the 60-day test drive is over, you will be able to continue using the product for another 12 months for just $31.&lt;/p&gt;
&lt;p&gt;Dr.Web Security Space for desktops and laptops is available for Windows, macOS and Linux.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15022&amp;lng=en</guid><title>Full support extended for Dr.Web products </title><link>https://news.drweb.com/show/?i=15022&amp;lng=en&amp;c=6</link><pubDate>Mon, 09 Jun 2025 09:42:55 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;June 9, 2025&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Full support has been extended for a number of Dr.Web products in accordance with Doctor Web’s lifecycle policy.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;
    &lt;b&gt;The following products and solutions will enjoy full support until June 30, 2026.&lt;/b&gt;
&lt;/p&gt;
&lt;p&gt;
   Dr.Web Desktop Security Suite:
&lt;/p&gt;

&lt;ul&gt;
    &lt;li&gt;
        Dr.Web 12.0 for Windows desktops and laptops
    &lt;/li&gt;
    &lt;li&gt;
        Dr.Web 12.0 for macOS
    &lt;/li&gt;
    &lt;li&gt;
       Dr.Web 11.1 for Linux desktops and laptops
    &lt;/li&gt;
    &lt;li&gt;
        Dr.Web Katana Business Edition 1.0
    &lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;
    Dr.Web Server Security Suite:
&lt;/p&gt;
&lt;ul&gt;
    &lt;li&gt;
        Dr.Web 12.0 for Windows Server
    &lt;/li&gt;
    &lt;li&gt;
        Dr.Web 11.1 for Unix-based servers
    &lt;/li&gt;
    &lt;li&gt;
        Dr.Web 12.0 for macOS Server
    &lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Dr.Web Mail Security Suite:&lt;/p&gt;
&lt;ul&gt;
    &lt;li&gt;Dr.Web 11.1 for Unix-based mail servers&lt;/li&gt;
    &lt;li&gt;Dr.Web 12.0 for Microsoft Exchange Server&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Dr.Web Gateway Security Suite:&lt;/p&gt;
&lt;ul&gt;
    &lt;li&gt;Dr.Web 11.1 for Unix-based Internet gateways&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Dr.Web Mobile Security Suite:&lt;/p&gt;
&lt;ul&gt;
    &lt;li&gt;Dr.Web 12.0 for Android mobile devices&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;b&gt;Support has been extended until December 1, 2026, for the following titles and components:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
    &lt;li&gt;Dr.Web Enterprise Security Suite Control Center&lt;/li&gt;
    &lt;li&gt;Dr.Web Industrial&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You can find up-to-date information about Dr.Web product support end dates on the &lt;a target="_blank" href="https://support.drweb.com/lifecycle/"&gt;product lifecycle page&lt;/a&gt;.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=15009&amp;lng=en</guid><title>About the need to upgrade Dr.Web Enterprise Security Suite to version 13</title><link>https://news.drweb.com/show/?i=15009&amp;lng=en&amp;c=6</link><pubDate>Fri, 18 Apr 2025 10:59:28 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;April 18, 2025&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Users of Dr.Web Enterprise Security Suite (ESS) are strongly recommended to promptly upgrade the product to version 13. Switching to the new version will provide you with full protection and regular updates for the antivirus components.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;Beginning January 30, 2024, support for Dr.Web Enterprise Security Suite version 12 was reduced. This means that the antivirus component updates for ESS version 12 can be discontinued at any time without additional notification, and the regular release of updates will continue only for the virus signature databases. Thus, once we stop releasing updates, this antivirus protection tool for workstations and servers will retain its functionality, but its level of protection against modern threats will gradually decrease due to component updates being terminated.&lt;/p&gt;
&lt;p&gt;The upgrade process is carried out automatically via the Control Center. The user just needs to follow the steps described in these &lt;a href="https://cdn-download.drweb.com/pub/drweb/esuite/13.0.1/documentation/html/en/admin_manual/index.html?update_server_backup.htm"&gt;instructions&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;The upgrade routine is as follows: first, the Control Center is updated, and then the components on end devices (workstations and servers) are automatically updated. If your servers are organised hierarchically or you use a cluster, your servers must be updated one at a time after you disable the hierarchical connection or cluster. After each server has been updated, you need to restore the hierarchical links (or cluster).&lt;/p&gt;
&lt;p&gt;We also remind you that beginning January 30, 2026, Dr.Web Enterprise Security Suite version 12 will be supported at &lt;a href="https://support.drweb.com/lifecycle/?lng=en"&gt;a basic level&lt;/a&gt; ꟷ this means that antivirus component updates will stop being released for it no later than this date. Do not expose your equipment to virus infections; upgrade your Dr.Web Control Center to version 13.&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=14994&amp;lng=en</guid><title>Targeted attacks less likely when Docker containers are examined by Dr.Web vxCube </title><link>https://news.drweb.com/show/?i=14994&amp;lng=en&amp;c=6</link><pubDate>Tue, 01 Apr 2025 00:00:00 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;April 1, 2025&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Modern IT infrastructures increasingly rely on container technologies, including Docker. These lightweight, standalone packages for running a variety of applications are valued for their effectiveness and easy integration with infrastructures. Such containers simplify application development, testing, and deployment; they offer exceptional scalability and allow companies to reduce their update release cycle.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;However, companies often use third-party images as templates for creating Docker containers, which may present a potential security risk, since images of this kind can contain loopholes or malicious features that pose a severe threat to infrastructures.&lt;/p&gt;

&lt;p&gt;Unverified container images can be used to deploy malware or introduce undocumented features into a corporate ecosystem. They effectively open up a pathway for implementing supply chain attacks (or Supply Chain Compromise as classified by MITRE). Examining and analysing containers thoroughly with Dr.Web vxCube before putting them to use can help eliminate these risks.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;New Dr.Web vxCube features &lt;/b&gt;&lt;/p&gt;

&lt;p&gt;Docker-container analysis has been introduced to Dr.Web vxCube to address the growing number of container-related threats. Users can now conduct an in-depth analysis of container images to identify potential hidden threats as well as undocumented and malicious features.&lt;/p&gt;

&lt;p&gt;The Dr.Web vxCube sandbox allows users to analyse the behaviour of suspicious objects and expose threats that can’t always be detected by conventional information security solutions. Dr.Web vxCube is an invaluable tool for countering modern-day attacks involving advanced persistent threats. &lt;/p&gt;

&lt;p&gt;This sandbox is the perfect choice for any SOC (Security Operation Center) that strives to identify and neutralise threats as early as possible. With Dr.Web vxCube, security professionals can thoroughly examine suspicious files in the isolated environment manually or automatically, identify well-hidden threats, and get detailed insight into the malware’s behaviour, thus boosting the effectiveness of their security solutions. Using the sandbox helps security researchers make decisions faster and reduces their workload. Dr.Web vxCube supports a variety of platforms and applications, allowing SOC experts to analyse a wide range of threats.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Key Docker-container analysis features in Dr.Web vxCube include the ability to:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
  &lt;li&gt;Scan container images in the sandbox to identify hidden or malicious features;&lt;/li&gt;
  &lt;li&gt;Analyse container behaviour, including network activity and interaction with the system;&lt;/li&gt;
  &lt;li&gt;Identify undocumented features that may pose a safety risk;&lt;/li&gt;
  &lt;li&gt;Generate a detailed report on the analysis results, which includes information about suspicious actions associated with the container image.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;b&gt;The advantages of analysing Docker container images with Dr.Web vxCube include:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
  &lt;li&gt;Better security for containerised applications thanks to in-depth image inspection;&lt;/li&gt;
  &lt;li&gt;Reduced security risks for the entire IT infrastructure as malicious code can no longer be deployed on devices with unverified containers;&lt;/li&gt;
  &lt;li&gt;Optimised container inspection for quick application development and deployment without compromising corporate security.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Learn more about Dr.Web vxCube and gain access to the demo version here: &lt;a href="https://www.drweb.com/vxcube/?lng=en" target="_blank"&gt;https://www.drweb.com/vxcube/&lt;/a&gt;.&lt;/p&gt;

&lt;table align="center"&gt;
  &lt;tbody&gt;
    &lt;tr&gt;
      &lt;td style="background: #68b218; height: 39px; margin: 1em auto 1em; text-align: center; width: 200px; font-weight: bold; padding: 0px 8px;"&gt;
        &lt;a href="https://download.drweb.com/vxcube/?lng=en" style="color: white; text-decoration: none; font-size: 13px; display: block"&gt;Try Dr.Web vxCube now&lt;/a&gt;
      &lt;/td&gt;
    &lt;/tr&gt;
  &lt;/tbody&gt;
&lt;/table&gt;</description></item><item><guid>https://news.drweb.com/show/?i=14984&amp;lng=en</guid><title>The Dr.Web Family Security application is available on Google Play</title><link>https://news.drweb.com/show/?i=14984&amp;lng=en&amp;c=6</link><pubDate>Thu, 13 Feb 2025 02:00:00 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;February 13, 2025&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;&lt;a href="https://products.drweb.com/home/family_security/?lng=en" target="_blank" rel="noopener noreferrer"&gt;Dr.Web Family Security&lt;/a&gt;—our mobile application for digital security for the entire family—is now available for download on Google Play. During installation, you can take advantage of a free 14-day trial period to evaluate all of its features.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;The application will help the head of family or simply one of the adults in your home to stay informed about the "digital habits" of their teenagers and elderly relatives as well as organize the safest digital environment for them. It helps parents gently teach their children to have healthy relationships with their gadgets and engage in safe Internet surfing.&lt;/p&gt;
&lt;p&gt;Dr.Web Family Security will help protect your family from calls from fraudsters and annoying spam. The application lets you create "white" and "black" contact lists: filter incoming calls and SMS messages remotely using the application, and then block hidden numbers and add secure contacts to the lists of allowed ones.&lt;/p&gt;
&lt;div class="flex fxCenter margBM"&gt;
&lt;a href="https://play.google.com/store/apps/details?id=com.drweb.familysecure" target="_blank" rel="noopener noreferrer"&gt;&lt;img src="https://st.drweb.com/static/new-www/img/pics-googlePlay/en.svg" alt="Google Play"&gt;&lt;/a&gt;
&lt;/div&gt;
</description></item><item><guid>https://news.drweb.com/show/?i=14982&amp;lng=en</guid><title>Keep your loved ones safe in the digital world with new version Dr.Web Family Security 2.0.1</title><link>https://news.drweb.com/show/?i=14982&amp;lng=en&amp;c=6</link><pubDate>Mon, 10 Feb 2025 11:43:28 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;February 10, 2025&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Create a secure digital environment with Dr.Web Family Security—the perfect solution for providing digital care for your loved ones.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;This family-oriented app lets you ward off digital threats by monitoring activity on family devices and setting up protective restrictions. It will also help parents gently guide their children into adopting healthy gadget-usage habits and ensure that their Internet surfing remains danger-free. Dr.Web Family Security maintains a secure environment, allowing you to enjoy the benefits of your mobile device’s connectivity without the risk of being exposed to inappropriate content or encountering scammers. It will also protect your elderly family members from intrusive SMS spam and calls from “financial institutions”, while ensuring that the sensitive data on their devices won’t get stolen.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;The key innovations of version 2.0.1 include support for Android 14 and 15. And to make it more convenient for users, the app is now also available on Google Play. &lt;/b&gt;&lt;/p&gt;
&lt;p&gt;Other changes in version 2.0.1 include:&lt;/p&gt;
&lt;ul&gt;
  &lt;li&gt;App optimisation for Xiaomi, Poco, Oppo, and Infinix devices, which are particularly popular among children.&lt;/li&gt;
  &lt;li&gt;We’ve added a dark theme and UI tweaks including adjustments for tablets and devices with small screens.&lt;/li&gt;
  &lt;li&gt;The family device Information Panel has been updated. Now it provides access to a map showing the location of family members at the time of the request as well as the list of all requests, including unsuccessful ones.&lt;/li&gt;
  &lt;li&gt;The new Dr.Web Family Security version available on Doctor Web's site also includes instructions to help users grant the app the permissions it requires.&lt;/li&gt;
  &lt;li&gt;Adjustments have also been made to the URL-filter and Application Control schedules.&lt;/li&gt;
  &lt;li&gt;Head of family devices now receive notifications that are appropriate for their current role.&lt;/li&gt; 
  &lt;li&gt;We’ve added the ability to collect diagnostic data for technical support reports and corrected problems involving certain access restrictions and settings being overwritten.&lt;/li&gt;
  &lt;li&gt;Issues that could arise when roles were switched in the app have been addressed.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You can find detailed information about the changes in Dr.Web Family Security 2.0.1 in &lt;a target="_blank" rel="noopener noreferrer" href="https://news.drweb.com/changelog/?lng=en"&gt;the  Changelog section&lt;/a&gt; on our website.&lt;/p&gt;
&lt;p&gt;To update the app to version 2.0.1, you need to uninstall the previous version and install the new one on both the head of family device and the dependent devices.&lt;/p&gt;
&lt;p&gt;You can learn more about Dr.Web Family Security and get a 14-day trial &lt;a target="_blank" rel="noopener noreferrer" href="https://products.drweb.com/home/family_security/?lng=en"&gt;here&lt;/a&gt;.&lt;/p&gt;

&lt;div class="flex fxCenter"&gt;
&lt;a href="https://play.google.com/store/apps/details?id=com.drweb.familysecure" target="_blank" rel="noopener noreferrer"&gt;&lt;img src="https://st.drweb.com/static/new-www/img/pics-googlePlay/en.svg" alt="Google Play"&gt;&lt;/a&gt;
&lt;/div&gt;</description></item><item><guid>https://news.drweb.com/show/?i=14979&amp;lng=en</guid><title>Upcoming major antispam update in Dr.Web products for Windows </title><link>https://news.drweb.com/show/?i=14979&amp;lng=en&amp;c=6</link><pubDate>Wed, 29 Jan 2025 09:43:11 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;January 29, 2025&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Doctor Web continues to improve the antispam module in its products to ensure that unsolicited emails can be filtered out even more effectively.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Dr.Web Antispam examines various email features and attributes in real time. This includes not just the message headers and body but attachments as well, and filtering never causes message delivery delays. As a result, users are not bothered by email ‘junk’ or performance issues affecting their mail client applications.&lt;/p&gt;

&lt;p&gt;By constantly introducing new filtering rules, Doctor Web ensures that users stay protected from spammers, who doggedly devise new tricks in an attempt to circumvent antispam technologies.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Igor Zdobnov, Doctor Web Antivirus Laboratory Chief:&lt;/b&gt;&lt;/p&gt;

&lt;blockquote&gt;&lt;em&gt;
    "In February, we’re releasing the most impactful update in this component’s history to significantly enhance and upgrade all of its technologies. Every day, spammers find new ways to bypass antispam algorithms, which is why we've adapted the new version as much as possible to detect all types of spam mailings, including phishing".
&lt;/em&gt;&lt;/blockquote&gt;

&lt;p&gt;&lt;b&gt;Marina Rybkina, Doctor Web Spam Analysis Department Manager:&lt;/b&gt;&lt;/p&gt;

&lt;blockquote&gt;&lt;em&gt; 
&lt;p&gt;"Identifying tell-tale spam attributes and creating rules to shield users from spammers as they try to bypass filtering technologies is one of our analysts’ main tasks. We also make timely adjustments to our existing antispam routines to adapt to brand-new detection-evasion techniques.&lt;/p&gt; 
&lt;p&gt;Spam filtering can, to some extent, protect users from phishing attacks. Most phishing samples have certain distinct features that our analysts use to create antispam algorithms for preventive protection against similar fraudulent campaigns".&lt;/p&gt; 
&lt;/em&gt;&lt;/blockquote&gt;

&lt;h3&gt;Important information for Windows XP users&lt;/h3&gt;

&lt;p&gt;Please note that the updated component version scheduled for release on February 3, 2025, will rely on technologies that are not compatible with Windows XP.&lt;/p&gt;

&lt;p&gt;It is recommended that you update this operating system to a later version if possible or that you do not install the latest antispam version. In the latter case, the component will continue to operate. To proceed with that approach, select "Update" in the application settings, click "Advanced settings", and in the component updating section, select "Virus databases only".&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=14961&amp;lng=en</guid><title>Dr.Web Family Security – Doctor Web’s new mobile app for your whole family’s digital security</title><link>https://news.drweb.com/show/?i=14961&amp;lng=en&amp;c=6</link><pubDate>Tue, 17 Dec 2024 03:00:00 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;December 17, 2024&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;We’re happy to present our new app Dr.Web Family Security, which is specifically designed to keep your entire household protected online.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;
  Create a secure digital environment to keep your loved ones safe from scams and establish healthy gadget-usage habits for your children.
&lt;/p&gt;
&lt;p&gt;
  Dr.Web Family Security addresses the biggest worries of many parents.
&lt;/p&gt;
&lt;ul&gt;
  &lt;li&gt;
    It will keep careful watch over your children and elderly family members. And thanks to the location feature, you'll always know where they are at any given moment. 
  &lt;/li&gt;
  &lt;li&gt;
    Should a protected device get lost or stolen, you will be able to locate it and lock it remotely.
  &lt;/li&gt;
  &lt;li&gt;
    Your kids will learn to use gadgets in moderation and won't be exposed to inappropriate content. Limit the time they can spend on social media or playing video games to keep them focused on their daily tasks and preserve their mental health.  
  &lt;/li&gt;
  &lt;li&gt;
    The Call and SMS filter will safeguard your loved ones from unsolicited SMS and fraudulent calls.  
  &lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;
  You can learn more about Dr.Web Family Security and get a 14-day trial &lt;a href="https://products.drweb.com/home/family_security/?lng=en"&gt;here&lt;/a&gt;.
&lt;/p&gt;

&lt;p&gt;
  Please note that the app does not provide protection against malware.
&lt;/p&gt;</description></item><item><guid>https://news.drweb.com/show/?i=14907&amp;lng=en</guid><title>Doctor Web resumed  virus database updates after the  attack on its infrastructure</title><link>https://news.drweb.com/show/?i=14907&amp;lng=en&amp;c=6</link><pubDate>Wed, 18 Sep 2024 15:49:02 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;September 18, 2024&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Now that the dangerous situation involving the attack on Doctor Web's infrastructure has been resolved successfully, we're happy to bring you up to speed on the latest developments and present the security incident's complete timeline.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;The attack on our infrastructure began on Saturday, &lt;b&gt;September 14, 2024&lt;/b&gt;.&lt;/p&gt;
&lt;p&gt;We were monitoring it closely and maintained control over the situation.&lt;/p&gt;
&lt;p&gt;On &lt;b&gt;September 16, 2024&lt;/b&gt;, Doctor Web’s information security team detected signs of unauthorised interference with our IT infrastructure.&lt;/p&gt;
&lt;p&gt;Following established security policies, we disconnected all our servers from the network and initiated comprehensive security diagnostics.
To analyse and eliminate the incident's consequences, we implemented a series of measures, including the use of Dr.Web FixIt! for Linux.
The gathered data allowed our security experts to successfully isolate the threat and ensure that our customers remained unaffected by it.&lt;/p&gt;
&lt;p&gt;&lt;b&gt;September 16, 6:30 GMT&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;In accordance with our security policy, we temporarily disconnected certain nodes in Doctor Web's infrastructure from the Internet to perform additional checks. 
This resulted in a short-term interruption in the availability of Dr.Web virus database updates.&lt;/p&gt;
&lt;p&gt;&lt;b&gt;September 17, 13:30 GMT&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;Dr.Web virus database updates resumed in full.
None of Doctor Web’s customers have been affected by the incident.&lt;/p&gt;
&lt;br/&gt;
&lt;p&gt;We continue to adhere to the highest information security standards and promptly take whatever measures are necessary to ensure the stable operation of all our systems and services.&lt;/p&gt;
</description></item><item><guid>https://news.drweb.com/show/?i=14897&amp;lng=en</guid><title>License coverage changes for Dr.Web Security Space for desktops and laptops—effective September 1, 2024</title><link>https://news.drweb.com/show/?i=14897&amp;lng=en&amp;c=6</link><pubDate>Fri, 30 Aug 2024 18:20:28 GMT</pubDate><description>&lt;p&gt;&lt;b&gt;August 30, 2024&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;newslead&gt;Starting September 1, 2024, Dr.Web Security Space licenses for desktops and laptops will no longer provide additional protection for Android devices.&lt;/newslead&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;To fully protect your mobile devices and Smart TVs from malware, dubious content, and unwanted calls and SMS, purchase a &lt;a href="https://products.drweb.com/mobile/android/?lng=en" target="_blank" rel="noopener noreferrer"&gt;Dr.Web Security Space license for mobile devices&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>
