Is Russian based Kaspersky Anti-virus a threat?

The importance of secure Anti-virus

A good strong anti-virus is vital in protecting against modern day threats including ransomware (such as the high profile CryptoLocker and Wannacry viruses) and also to prevent the exploitation of vulnerabilities in software. Using technology that recognises malicious behaviour once an infection occurs on a machine – it can then stop the malicious program and rollback the damage.  It also provides clean-up tools and a root cause analysis to see how the infection occurred.

Kaspersky is a Russian multinational cybersecurity and anti-virus provider headquartered in Moscow, one of their primary products is their widely used Anti-virus solution.

What is the potential threat?

5 years ago, the UK’s National Cyber Security Centre (NCSC) advised government departments, against using Kaspersky products for systems related to national security. Yesterday Ian Levy Technical Director for NCSC wrote a blog giving advice on the use of Russian technology products and services following the invasion of Ukraine.  Ian Levy commented

We have no evidence that the Russian state intends to suborn Russian commercial products and services to cause damage to UK interests, but the absence of evidence is not evidence of absence.

Anti-virus solutions hold the key to an organisation’s cybersecurity, and it is vital they are trusted and secure solutions, so organisations should carefully consider the potential risks involved in continuing to use Russian-based solutions.

NCSC advice to organisations

For organisations using Russian – nexus products and services the NCSC is advising them to reconsider the use of such technology including:

  • wider public sector organisations that weren’t covered by its 2017 guidance
  • organisations providing services to Ukraine
  • organisations that if compromised could represent a PR ‘win’ for Russia
  • organisations providing services related to critical infrastructure

ramsac’s advice for organisations using Kaspersky Anti-Virus

The NCSC has not gone as far as to say that there is a clear and real risk. The German Government have taken a much more direct stance and warned strongly against the use of the product. In reality each business will need to take its own risk assessment and decide whether they are comfortable in continuing to use the Kaspersky product. If you would like to transition to an alternative provider, we would be happy to offer advice on how to do effectively and which are the leading products on the market.

Sophos Intercept X factsheet

Explore the “next generation” in virus protection.

Learn more about how an advanced anti-virus solution can protect your organisation.

Related Posts

  • Why Every Organisation Needs The Perfect IT Security Policy

    Why Every Organisation Needs The Perfect IT Security Policy

    Cybersecurity

    An IT security policy isn’t just paperwork, it’s your organisation’s first line of defence. In this blog, we explore why a clear, practical policy matters, what it should cover, [...]

    Read article

  • How to Build a Disaster Recovery Plan That Actually Works

    How to Build a Disaster Recovery Plan That Actually Works

    CybersecurityIT

    From ransomware to IT outages, UK organisations face rising threats to continuity. This post covers the key elements of a strong disaster recovery plan – and why testing, communication [...]

    Read article

  • Why should an organisation carry out board-level cyber training? 

    Why should an organisation carry out board-level cyber training? 

    Cybersecurity

    Cybersecurity isn’t just an IT issue, it’s a leadership issue, and this blog explains why board-level training is vital to protect your business from the top down. [...]

    Read article

  • How to Build a Resilient SME in an Uncertain World

    How to Build a Resilient SME in an Uncertain World

    CybersecurityIT

    In an unpredictable world, resilience is no longer optional for SMEs. Rob May shares practical insights from Unbreakable Business to help leaders protect their organisations and bounce back stronger. [...]

    Read article

  • What is Vulnerability Management? A beginner’s guide for business leaders 

    What is Vulnerability Management? A beginner’s guide for business leaders 

    Cybersecurity

    This blog explains vulnerability management in clear, simple terms to help business leaders understand how to reduce cyber risk and improve security across their organisation. [...]

    Read article

  • Smishing: How fake texts can trick your team

    Smishing: How fake texts can trick your team

    Cybersecurity

    A real-world example of a WhatsApp scam targeting ramsac staff shows why organisations must stay vigilant against smishing attacks, here’s what to look for and how to protect yourself. [...]

    Read article

Quiz yourself

Are you more cyber savvy than an 11 year old?

11-14 year olds get asked these questions in school. Could you get these right?