Science & Tech · Cybersecurity · 3 hrs ago
NetamLoader malware found on a computer running government-specific Windows in Asia
Kaspersky found NetamLoader malware on one computer during the first half of 2026.
The computer ran a customized version of Windows used by government agencies in Asia, though the agency was not identified.
The malware used genuine Microsoft software components to run malicious code and avoid detection.
Its files were found in a system-update folder alongside software from Patch My PC, leading researchers to suspect a supply-chain attack.
NetamLoader can disrupt security scans, hide its activity, delete system logs and collect data, but researchers have not confirmed whether sensitive information was stolen.
They also have not established how the infection began, leaving the attack's impact and entry point unknown.
NetamLoader malware was detected on one computer running a customized Windows system used by government agencies in Asia.
Kaspersky detected it during the first half of 2026, but the specific agency remains unidentified.
The malware uses legitimate Microsoft software components to run malicious code and evade security detection.
It was found in a directory used for system updates, and the package included files from Patch My PC and programs digitally signed by Microsoft.
Researchers have not confirmed whether sensitive information was stolen or how the initial infection occurred.
- Who
- Suspected nation-state hackers developed the malware. The affected government agency has not been identified.
- What
- NetamLoader malware was found on a computer running a customized version of Windows.
- When
- Kaspersky detected it during the first half of 2026.
- Where
- On one computer in Asia, in a directory used for system updates.
- Why
- The malware was designed to target a customized Windows system used by government agencies. The attackers’ motive is not stated.
This story does not have two clearly opposing sides.
Kaspersky detected NetamLoader on one computer.
SC Media published an article about the malware.
- Malware
- NetamLoader
- Detection
- One computer
- Detection period
- First half of 2026
- Target system
- Customized Windows used by government agencies in Asia
- Update-directory files
- Patch My PC files and programs digitally signed by Microsoft