Kaspersky Defends Stealth Swap of Antivirus Software on US Computers (techcrunch.com) 29
Cybersecurity firm Kaspersky has defended its decision to automatically replace its antivirus software on U.S. customers' computers with UltraAV, a product from American company Pango, without explicit user consent. The forced switch, affecting nearly one million users, occurred as a result of a U.S. government ban on Kaspersky software.
Kaspersky spokesperson Francesco Tius told TechCrunch that the company informed eligible U.S. customers via email about the migration, which began in early September. Windows users experienced an automatic transition to ensure continuous protection, while Mac and mobile users were instructed to manually install UltraAV. Some customers expressed alarm at the unannounced software swap. Kaspersky blamed missed notifications on unregistered email addresses, directing users to in-app messages and an online FAQ. The abrupt change raises concerns about user autonomy and privacy in software updates, particularly as UltraAV lacks an established security track record.
Kaspersky spokesperson Francesco Tius told TechCrunch that the company informed eligible U.S. customers via email about the migration, which began in early September. Windows users experienced an automatic transition to ensure continuous protection, while Mac and mobile users were instructed to manually install UltraAV. Some customers expressed alarm at the unannounced software swap. Kaspersky blamed missed notifications on unregistered email addresses, directing users to in-app messages and an online FAQ. The abrupt change raises concerns about user autonomy and privacy in software updates, particularly as UltraAV lacks an established security track record.
We got a workaround? (Score:2, Interesting)
Re:We got a workaround? (Score:5, Interesting)
Considering Kaspersky is on the entity list, it's probably looking to just divest of any US interests ASAP to avoid further sanctions to preserve it's reputation abroad for the rest.
I wouldn't be surprised if they make some effort to block machines in US from installing their AV.
Re: (Score:3, Funny)
Send everything on your computer directly to Kremlin without going thru Kaspersky
Re: (Score:2)
Send everything on your computer directly to Kremlin without going thru Kaspersky
What evidence exists that this happens?
I am asking honestly. I do not really know the backstory.
Re: (Score:2)
... so no evidence at all. Thanks for the clarification.
Re: (Score:3)
There may be no evidence that this ever happened, but it's certain that it could happen at any moment just on Kremlin's whim.
I'm not shitting on Kaspersky's devs and management, it's just the way things are when you're under the jurisdiction of sovereign country. US companies are no different. When they receive a NSL (National Security Letter) they obey and give up all they know about you to the government, and you never even learn it happened.
Russia is considered a hostile country to America right now, and
Re: (Score:2)
The backstory is that it's software developed by Russians. And since they're Russians, it's suspected that they built into the software the ability to do things that the end user wouldn't be aware of, and possibly install software on their machines quietly. Need more proof than this article?
The Russians tricked me! (Score:2)
No surprise.
What's the controversy? (Score:5, Informative)
I don't understand why this is such a huge controversy, the whole thing seems really straightforward:
1. Kaspersky is banned from the US.
2. Kaspersky plans to replace their soon to be unsupported antivirus software with an American one (a good thing to do, seems like Kaspersky really does care about the security of their users).
3. Kaspersky communicates this to their customers via email and the application (again, this is the right way to do it and a good thing).
4. The time comes and Kaspersky replaces it's software with the US antivirus.
And then the result of this is users saying "omg this software that has complete control of my computer is able to install software?!?! Scary!" Give me a break. This whole thing is such a non-story, please correct me if I'm missing something or if you have a different perspective.
Re: (Score:2)
Re: (Score:2)
It is very likely the opposite, that Kaspersky OEMed UltraAV.
Kaspersky is a huge, very profitable company. UltraAV is a nothingburger.
In fact I would not be surprised if Kaspersky has not taken a majority stake in the company.
Re: (Score:2)
In fact I would not be surprised if Kaspersky has not taken a majority stake in the company.
You not being surprised and them actually doing so are not the same thing.
Did it actually happen?
Re: (Score:2)
Can someone tell me what Kasperdky did, or what evidence exists that they did something bad?
Re: What's the controversy? (Score:2)
At https://ultrasecureav.com/faq [ultrasecureav.com]
It says
Due recent restrictions to Kaspersky, UltraAV is operating as an independent service provider in order to offer comparable continued service for Kaspersky US customers.
That makes it very clear that they are contracted out to Kaspersky.
Re: (Score:2)
Fair enough, thank you
Re:What's the controversy? (Score:5, Informative)
Pango is in turn owned by WC SACD Holdings Inc, a Massachussets company. The CEO, Hari Ravichandran, is the CEO of Aura and talks as Pango as a subsidiary [jpmorgan.com]. Aura in turn has a technobabble about us page that says nothing [aura.com].
The UltraAV software itself isn't signed by Pango, WC, or Aura. It's signed by "Max Secure Software India Private Limited". Which, at best, means that Pango subcontracted an Indian AV to brand as American so Kaspersky could claim they swapped out an AV for an "American" one. MaxSecure is generally considered sketchy software and has asked to be unlisted as a potentially unwanted program among other AV/antimalware apps [reddit.com], and that it will false positive files for the illusion of being effective.
This is sketchy as hell, and never should have been done without user consent, much less with the company they chose to contract.
Re: (Score:2)
It's very questionable how "american" UltraAV is. UltraAV is owned by Pango, a site which owns multiple VPN companies and a VPN review site (not suspicious at all).
Pango is in turn owned by WC SACD Holdings Inc, a Massachussets company. The CEO, Hari Ravichandran...
This is American in my book. Does the name of the CEO bother you?
Anyway, the government is free to ban them as well if they pose a security risk. It's their job and their obligation, after taking the responsibility to ban Kaspersky.
This is sketchy as hell, and never should have been done without user consent, much less with the company they chose to contract.
The alternative possibly was to leave the users without an AV software at all, and possibly they did the lesser evil.
They've been banned from the US. They have no obligations to American users anymore, and anything they still do is goodwill. They communicated their intentions via
Re: (Score:2)
They've been banned from the US. They have no obligations to American users anymore, and anything they still do is goodwill.
They've been banned from the US. That means they have no business installing anything on anything without explicit consent, especially sketchy software. This is an attack on computers of our nation by a foreign adversary.
Re: (Score:2)
Well what do you expect when the US placed sanctions on Kaspersky? It's difficult for them to work with an American company now, so of course it was going to push Kaspersky users towards this kind of thing.
It was a stupid decision and made Americans less secure. If the authorities actually cares they would have not just banned Kaspersky, but worked with them to migrate users onto an All American Made solution.
Re: (Score:2)
This is sketchy as hell, and never should have been done without user consent, much less with the company they chose to contract.
That doesn't sound American at all. I bet the users who were running *checks notes* a Russian AV solution are very upset about UltraAV's lack of Americanness.
Re: (Score:1)
Then they convert Overwatch to Overwatch 2, endless complaints.
Microsoft accidentally updates some Windows 10 users to Windows 11, Slashdot loses its mind at good ol evil "Macro$$$shit taking over machines we no longer own".
But an antivirus automatically installs a completely separate antivirus product from another vendor and now suddenly "duhhhh, I don't know why this bad, me dumb".
Perhaps you'd like to shut down your Ubuntu
Re: (Score:2)
Blizzard forcefully updates Warcaft 3 to Warcraft 3 Reforged, users revolt.
Then they convert Overwatch to Overwatch 2, endless complaints.
Microsoft accidentally updates some Windows 10 users to Windows 11, Slashdot loses its mind at good ol evil "Macro$$$shit taking over machines we no longer own".
But an antivirus automatically installs a completely separate antivirus product from another vendor and now suddenly "duhhhh, I don't know why this bad, me dumb".
Bad analogy. Windows 10 still works, and users are rightfully angry when it is suddenly replaced by Windows 11.
Kaspersky is forced by the government to not work anymore. Doing nothing is a bad option, unlike the Windows case, because it leaves users' computers unprotected.
Re: (Score:2)
It's windows they have complete ring-0 root control of the OS it's extremely simple.
Re: (Score:2)
but they could during install prompt for user to allow the installation..
And risk ignorant users declining and losing protection? Then when the next ransomware wave hits, whom do users and media blame? Kaspersky.
Re: (Score:2)
On Windows, applications can usually install their own updater service that is set up to run with elevated privileges (noteworthy examples: Google Chrome, Adobe Reader, Lenovo Vantage/System update, etc.). ... which usually acts as a rootkit, listening for remote commands and updates, including removing it
It is absolutely of no surprise that an antivirus that is rooted deep enough into the OS to be able scan every byte that goes through you storage devices and network cards, also installs an updater service
Re: (Score:2)
how was the application able to update itself without user intervention or UAC prompt?
It's really the same thing. Anyway, the antivirus programs tend to work on a lower level than the UACs. This is your answer.