You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
passive neuron
About this tag
The PassiveNeuron tag covers a server-focused cyberespionage campaign targeting Windows Server hosts, as documented by Kaspersky's GReAT team. The campaign uses bespoke implants like Neursite and NeuralExecutor alongside commodity tools such as Cobalt Strike to establish stealthy, persistent footholds in government, financial, and industrial networks across Asia, Africa, and Latin America. Activity was observed from December 2024 through at least August 2025, with a multi-stage DLL loader chain enabling low-noise access. This tag is relevant for IT security professionals and Windows Server administrators monitoring advanced persistent threats and server-side malware.
Kaspersky’s Global Research and Analysis Team (GReAT) has publicly exposed an active, server‑focused cyberespionage campaign — tracked as PassiveNeuron — that has compromised Internet‑facing Windows Server systems in government, financial and industrial environments across Asia, Africa and Latin...
Kaspersky’s Global Research and Analysis Team (GReAT) has exposed an active, server‑focused cyberespionage campaign it calls PassiveNeuron that specifically targets Windows Server hosts — using a blend of bespoke implants and commodity tooling to establish long‑term, stealthy footholds in...
Kaspersky’s GReAT team has pulled back the curtain on a deliberately targeted cyber‑espionage operation they call PassiveNeuron, a campaign that focuses on Windows Server hosts and employs a multi‑stage DLL loader chain, two previously undocumented implants (Neursite and NeuralExecutor) and...