Kaspersky Lab

Kaspersky Lab is a privately held cybersecurity company headquartered in Moscow, Russia. Founded in 1997 by Eugene Kaspersky, Natalya Kaspersky, and Alexey De-Monderik, it grew out of Eugene Kaspersky’s work on antivirus technology during the late 1980s and early 1990s. Its early products were developed in response to emerging computer viruses and were later commercialized as AntiViral Toolkit Pro, or AVP. After the AVP trademark was unavailable in the United States, the product was renamed Kaspersky Anti-Virus. The company’s early growth was driven by strong malware-detection performance, international distribution agreements, and an expansion strategy led in large part by Natalya Kaspersky. A 1994 evaluation by Hamburg University increased the visibility of the technology, while the 1998 CIH virus outbreak helped establish Kaspersky’s reputation because its software was among the products able to remove the infection at the time. By 2000, Kaspersky had offices or sales relationships across numerous countries and was selling outside Russia for a substantial share of its business. It subsequently expanded its regional presence in Europe, Asia-Pacific, the Middle East, Africa, Japan, and the Americas. Kaspersky’s portfolio extends beyond traditional antivirus software. Consumer products have included Kaspersky Anti-Virus, Internet Security, and Total Security, later reorganized into Basic, Plus, and Premium tiers. These products combine malware protection with features such as phishing defense, privacy controls, password management, parental controls, and device protection. Enterprise offerings include endpoint security, industrial and operational-technology protection, cloud and container security, security information and event management, extended detection and response, fraud prevention, mobile security, and secure network infrastructure. KasperskyOS is a proprietary microkernel operating system designed around isolation, default-deny controls, and secure-by-design principles for embedded, industrial, automotive, and critical-infrastructure environments. The company is also known for the work of its Global Research and Analysis Team, which investigates sophisticated malware and cyber-espionage operations. Kaspersky researchers have reported on campaigns and platforms associated with highly capable state-linked actors, including the Equation Group and Stuxnet-related activity. The company publishes threat research and security-risk studies and has licensed its security technology to other technology and security vendors. Kaspersky’s international position has been affected by continuing concerns about its Russian ownership, operating environment, and alleged relationships with Russian security institutions. Kaspersky has denied that it assists governments with offensive cyber operations. In response to government restrictions and trust concerns, it launched a transparency program, established review centers, invited independent scrutiny of its software and processes, and moved important infrastructure and customer-data operations to Switzerland. The United States prohibited sales and updates to US customers in 2024 and imposed sanctions on senior executives; Kaspersky then announced its withdrawal from that market. Despite these restrictions, the company continues to serve customers internationally and maintains offices in multiple regions.

Kaspersky Lab’s technological origins date to 1989, when Eugene Kaspersky developed an antivirus program after encountering the Cascade virus. The early tool contained only a small number of virus signatures and was initially shared within a limited personal and professional circle. Eugene continued developing the technology while working at KAMI, where it evolved into AntiViral Toolkit Pro, released commercially in 1992. A 1994 comparative evaluation by Hamburg University placed the software first among tested products, giving it important international credibility. In 1997, Eugene Kaspersky, Natalya Kaspersky, and Alexey De-Monderik left KAMI and founded Kaspersky Lab. The company continued developing AVP, which was later renamed Kaspersky Anti-Virus for the US market because another company controlled the AVP trademark there. The 1998 CIH virus outbreak became an important commercial turning point. Kaspersky’s software was reported to be one of the few products capable of removing the infection during the initial outbreak, increasing demand and helping the company secure technology and distribution relationships in Japan, Finland, Germany, and other markets. Revenue expanded rapidly between 1998 and 2000, with foreign sales representing a significant portion of the business. Natalya Kaspersky helped build overseas partnerships and localization programs, and offices were opened in the United Kingdom, Poland, the Netherlands, China, Germany, France, the United States, and Japan. Further regional expansion reached Southeast Asia, the Middle East, South Africa, India, and other markets. During the 2000s, Kaspersky broadened from a core antivirus vendor into a multinational security company. It built a global research operation, expanded enterprise offerings, and developed technology licensed by other security and networking companies. The business reached a substantial international user base and became one of the largest security-software vendors in Europe. In 2010 it ranked among the leading antivirus vendors by revenue, and in 2012 it became the first Russian company included in the Software Top 100 ranking cited by reference sources. In 2011, General Atlantic acquired a 20 percent stake with an expected role in helping Kaspersky prepare for a public offering. Kaspersky later chose to remain private and repurchased the stake. The disagreement over a possible flotation was followed by executive departures, alongside later reported disputes concerning management and company direction. Kaspersky also left the Business Software Alliance at the start of 2012 because it opposed the organization’s support for SOPA-related legislation. The company’s research profile grew through the work of its Global Research and Analysis Team, which investigated advanced malware, espionage platforms, and organized cybercrime. Kaspersky researchers contributed public analysis of Equation Group activity and the Stuxnet ecosystem and continued publishing threat intelligence and security-risk research. From 2015 onward, the company faced intensified scrutiny. Allegations concerning VirusTotal submissions were denied. In 2017, the US government prohibited federal agencies from using Kaspersky software amid allegations that the company’s Russian connections created a security risk. Kaspersky denied assisting Russian intelligence and responded with a Global Transparency Initiative. It opened transparency centers, offered source-code review arrangements, and moved key infrastructure and customer-data operations to Switzerland. Kaspersky continued developing enterprise, industrial, cloud, and secure-operating-system products. KasperskyOS was introduced as a secure-by-design platform for embedded and critical systems, while later products addressed XDR, SIEM, industrial control, hybrid cloud, software-defined networking, and IoT security. Partnerships included long-running cooperation with INTERPOL, a commercial relationship with Ferrari, and agreements with organizations in Africa and other regions. In 2023, Kaspersky disclosed an iPhone compromise affecting senior personnel. In 2024, the US prohibited sales and updates to US customers and sanctioned senior leaders, leading Kaspersky to announce its exit from the US market. Its software was subsequently replaced on some US customer devices by UltraAV, an episode that generated customer criticism. The company remains active internationally, with customers in more than 200 countries and offices across several global regions.

1. 2024US market exit

   Kaspersky announces its withdrawal from the United States after government restrictions on sales and updates.

   Source
2. 2023iPhone campaign disclosed

   The company reports a long-running iPhone compromise affecting staff and managers.

   Source
3. 2017Global Transparency Initiative launched

   Kaspersky introduces transparency centers and source-code review measures in response to trust and geopolitical concerns.

   Source
4. 2011General Atlantic investment and repurchase

   General Atlantic acquires a 20 percent stake, which Kaspersky later repurchases after deciding not to pursue an IPO.

   Source
5. 1998CIH outbreak accelerates growth

   The company gains visibility after its software successfully addresses the CIH virus outbreak.

   Source
6. 1997Kaspersky Lab founded

   Eugene Kaspersky, Natalya Kaspersky, and Alexey De-Monderik establish Kaspersky Lab.

   Source
7. 1992AntiViral Toolkit Pro released

   The antivirus technology developed at KAMI is released as AntiViral Toolkit Pro, or AVP.

   Source
8. 1989Early antivirus development

   Eugene Kaspersky develops an antivirus program in response to the Cascade virus.

   Source

A technology-led cybersecurity brand positioned around malware research, broad defensive coverage, threat intelligence, and protection for both consumers and organizations.

• Kaspersky Basic, Plus, and PremiumConsumer cybersecurity2023

  The current consumer subscription lineup replacing the earlier Anti-Virus, Internet Security, and Total Security tiers. Depending on the plan, the products combine malware protection with privacy, phishing defense, password management, parental controls, and broader identity or device-protection features.

• Kaspersky Endpoint Security for BusinessEnterprise endpoint security

  A business security suite with endpoint protection, centralized administration through Kaspersky Security Center, reporting, quarantine, policy management, and related controls for organizational environments.

• Kaspersky NextXDR and endpoint security

  A family of business detection-and-response offerings, including endpoint and extended detection capabilities designed to help organizations identify, investigate, and contain attacks.

• Kaspersky Industrial CyberSecurityIndustrial cybersecurity

  Security products and services for operational technology and industrial-control environments, aimed at protecting industrial systems while accounting for their availability and safety requirements.

• KasperskyOSSecure operating system2017

  A proprietary microkernel operating system built around component isolation, a minimal trusted base, default-deny enforcement, and policy-based security. It is intended for network equipment, industrial systems, IoT gateways, vehicles, and other critical environments.

• Kaspersky IoT Secure GatewayIoT and industrial security2021

  Secure gateway appliances based on KasperskyOS for connecting and protecting industrial or Internet-of-Things environments.

• Threat intelligence and GReAT researchCybersecurity services

  Research, intelligence, incident-analysis, and reporting activities associated with Kaspersky’s Global Research and Analysis Team and other security operations.

• ThreatpostSecurity media2009

  A Kaspersky-funded computer-security news and analysis website. It was presented as editorially independent and stopped publishing new articles after August 2022.

• 2017Global Transparency Initiative

  Global

  Kaspersky established transparency centers and related review mechanisms so partners, authorities, and other stakeholders could inspect aspects of its software and operational practices.

  Outcome. The initiative became a central part of Kaspersky’s response to geopolitical and trust concerns.

  Source
• 2013INTERPOL Global Complex for Innovation cooperation

  Global

  Kaspersky supported INTERPOL’s Singapore innovation center with digital-forensics tools and expertise for cybercrime investigations.

  Outcome. The cooperation was expanded through later information-sharing and joint-operation agreements.

  Source

• 2024Withdrawal from the United StatesStrategy

  US authorities prohibited sales and software updates and sanctioned senior Kaspersky leaders.

  What changed. Kaspersky announced that it would leave the US market.

  Aftermath. US customer installations were later replaced by UltraAV software in an abrupt transition that drew user criticism.

  Source
• 2023Consumer lineup reorganizedGeneration change

  Kaspersky modernized its consumer product architecture and subscription tiers.

  What changed. Basic, Plus, and Premium replaced the earlier Anti-Virus, Internet Security, and Total Security names.

  Aftermath. The new tier structure became the principal consumer offering.

  Source
• 2011Remain privately heldStrategy

  General Atlantic invested in the company with an expectation that it could support a public offering.

  What changed. Kaspersky chose not to proceed with an IPO and repurchased the investor’s stake.

  Aftermath. The company remained private, while disagreements over ownership and management were followed by executive departures.

  Annual revenue. $667 million (2013; unaudited figure)

  Source
• 1997Founding of Kaspersky LabProduct launch

  The founders separated from KAMI to build a dedicated company around the AVP antivirus technology.

  What changed. Kaspersky Lab was established and continued commercial development of its antivirus products.

  Aftermath. The company became an international cybersecurity vendor.

  Source

• 2024US prohibition and forced market exitControversy

  The US prohibited Kaspersky from selling and distributing software and updates to US customers and sanctioned senior leaders. Kaspersky announced that it would leave the market.

  Source
• 2017Government restrictions over alleged Russian tiesControversy

  US authorities restricted Kaspersky products in federal systems, citing national-security concerns and alleged relationships with Russian security institutions. Kaspersky denied improper cooperation with Russian intelligence.

  Source
• 2015VirusTotal manipulation allegationsControversy

  Former employees alleged that Kaspersky had inserted modified files into the VirusTotal ecosystem to trigger false positives in competing products. The company denied the allegations and disputed the authenticity and motives behind reported emails.

  Source

• 2024US government prohibits Kaspersky sales and software updates

  The US announced restrictions prohibiting Kaspersky from selling or distributing software and updates to US customers and sanctioned 12 senior leaders.

  RegulationLeadership change
  Source
• 2024Kaspersky announces withdrawal from the US market

  Following US government restrictions, the company said it would leave the US market.

  Regulation
  Source
• 2024Kaspersky software replaced on US customers’ computers

  Kaspersky software on some US users’ systems was replaced by UltraAV, prompting complaints and confusion among customers.

  OtherRegulation
  Source
• 2023Kaspersky reports iPhone espionage campaign affecting staff

  The company said an attack had compromised iPhones belonging to senior staff and managers and that traces extended back to 2019.

  Other
  Source
• 2022Kaspersky pauses Ferrari Formula One partnership

  Kaspersky and Scuderia Ferrari jointly paused their partnership after Russia’s invasion of Ukraine.

  Other
  Source

1. Kaspersky Lab
2. Kaspersky official website