Description
Kovter is a malware family with a long evolution that began as police themed ransomware in 2012, shifted into advertising fraud, became fileless in 2015, and spread through malvertising campaigns and exploit kits. Its fileless persistence made it a benchmark case for detections that look beyond files on disk.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Kovter.1 |
| Gen:Variant.Trojan.Kovter.2 |
| Trojan.Kovter.A |
| Trojan.Kovter.B |
| Win32.Ransomware.Kovter |
| Win32.Trojan.Kovter |
