Kaspersky Details NetamLoader Malware Targeting Government Windows 10 Systems in Asia

According to a report published by Kaspersky and covered by The Hacker News, cybersecurity researchers have detailed a new malware operation targeting government entities in Asia. The attack chain is described as highly sophisticated and targets a custom Windows 10 build used exclusively by government organizations in the region. Central to the operation is NetamLoader, a previously undocumented .NET assembly-loading framework. The framework's specific mechanics and the initial infection vector have not been fully disclosed in the available summary. The activity was reported in November 2026. The operation focuses on government entities, leveraging the custom operating environment to deploy and execute malicious payloads. Kaspersky has not attributed the activity to a specific threat actor in the reported summary. No specific software patch has been identified; mitigation is expected to rely on standard security best practices for government systems and monitoring for anomalies related to .NET assembly loading.