# NetamLoader disclosure exposes attack on government Windows systems in Asia

_Published Sunday, November 1, 2026 at 4:05 AM EST · Security · Latest · Tier 2 — Notable_

![NetamLoader disclosure exposes attack on government Windows systems in Asia — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy0oLNj9TVg8ifLKdJSg4HH1EhN3m_OBldd7wEIeVoQSHtFXSmsiPdmf-njsPD-CbVHY8NckeW2N9rN8-CTnp81zaeFq-ISj04O7ihoj5HgnvJT_zY_0fdC8vCcd5LXL8Mx9ym1fPI5GMrEtjxZoEiernCr_CZwLocgtrJsKZzixEnYUe2WmkehWLNR2hx/s1700-nu-rw-lo-l85-e365/windows-hacker.jpg)

Kaspersky has disclosed a previously undocumented malware framework called NetamLoader targeting a custom Windows 10 build used exclusively by government entities in Asia. Its telemetry identified a single victim; the attacker and any theft of sensitive information remain unknown.

The infection chain uses legitimate application components to load malicious code inside trusted processes. Its payloads bypass a Windows malware-scanning interface, remove files and execution traces, and contact a remote server to retrieve and execute further code.

Kaspersky detected the artifact in the first half of 2026. A supply chain compromise is suspected, but the archive's delivery method remains unknown.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/netamloader-malware-targets-government.html)

---
Canonical: https://techandbusiness.org/newswire/YA0ZmCZ8ldR2i7YH04m8LR
Published: 2026-11-01T09:05:46.852Z
Story chronology: 2026-11-01T07:02:00.000Z
Retrieved: 2026-11-01T12:20:24.867Z
Publisher: Tech & Business (techandbusiness.org)