Italian-made spyware spotted in breaches of Russian, Belarusian systems

Italian-made spyware spotted in breaches of Russian, Belarusian systems

A Russian cybersecurity firm, Kaspersky, detected the use of Italy’s Memento Labs’ spyware, Dante, in attacks on organizations in Russia and Belarus. The report highlights the indirect involvement of the spyware in espionage campaigns, linked to the hacking group ForumTroll, and sheds light on the ongoing legacy of Hacking Team’s surveillance tools. #MementoLabs #Dante #ForumTroll

Keypoints

  • Kaspersky discovered the use of Memento Labs’ spyware, Dante, in cyberattacks against Russian and Belarusian targets.
  • The hacking group ForumTroll is believed to have used Dante through a tool called LeetAgent, functioning as a loader.
  • The attacks involved phishing campaigns exploiting a zero-day vulnerability in Google Chrome (CVE-2025-2783).
  • Memento Labs, formerly Hacking Team, rebranded after a 2015 data leak and continued selling surveillance tools to law enforcement.
  • The report emphasizes the ongoing use and evolution of surveillance technology by state-linked hacking groups.

Read More: https://therecord.media/memento-labs-formerly-hacking-team-dante-spyware-russia-kaspersky