Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Alexey Andreev
Numerical Analysis of D-Entropy in Interacting Particle Systems: Insights into Energy Redistribution in Classical Mechanics
Choose an area of interest and we will send you notifications of new preprints at your preferred frequency.
The Influence of Sudden Stratospheric Warming on the Development of Ionospheric Storms: The Alma-Ata Ground-Based Ionosonde Observations
All articles published by MDPI are made immediately available worldwide under an open access license. No special permission is required to reuse all or part of the article published by MDPI, including figures and tables. For articles published under an open access Creative Common CC BY license, any part of the article may be reused without permission provided that the original article is clearly cited. For more information, please refer to https://www.mdpi.com/openaccess.
The Role of Sudden Stratospheric Warmings on the Development of Ionospheric Storms
Preprint Article Version 1 This version is not peer-reviewed Version 1 : Received: 4 April 2024 / Approved: 4 April 2024 / Online: 4 April 2024 (13:25:22 CEST) Gordiyenko, G.; Yakovets, A.; Litvinov, Y.; Andreev, A. The Role of Sudden Stratospheric Warmings on the Development of Ionospheric Storms. Preprints 2024, 2024040377. https://doi.org/10.20944/preprints202404.0377.v1 Gordiyenko, G.; Yakovets, A.; Litvinov, Y.; Andreev, A.
Where Linux is in your home, and how to protect Linux devices from hacking
Over the first 23 years of this century, the Linux operating system has become as ubiquitous as Windows. Although only 3% of people use it on their laptops and PCs, Linux dominates the Internet of Things, and is also the most popular server OS. You almost certainly have at least one Linux device at home — your Wi-Fi router. But it’s highly likely there are actually many more: Linux is often used in smart doorbells, security cameras, baby monitors, network-attached storage (NAS), TVs, and so on.
How to protect your child's privacy when using social networks and IMs Original
When I was growing up, I never gave much thought to the communications between my parents and my teachers. Typically, there was a back-to-school night; if ever I did something wrong, the communication was made in a phone call from the teacher or principal; and there were letters/results that needed to be signed by my parents.
How to deal with your brand's doppelgangers
As soon as your company becomes more or less famous, more often than not someone starts exploiting your success for their own purposes. At best, they simply hide behind your name in order to promote some dubious quality goods and services. At worst, they prey on your clients, partners, or even employees.
The Fediverse: what is it, what's it for, and how does it work?
After Elon Musk “broke” his Twitter (now known as X) and Mark Zuckerberg released his Threads, there’s been a lot of talk on the internet about something called the Fediverse. Many see it as humanity’s last hope to escape the current social network mess. In this post, we take look at what this Fediverse is, how it works, what it offers users right now, and what it may change in the near future. What’s wrong with regular social networks? Let’s start with why Fediverse is needed in the first place.
HR phishing: self-evaluation questionnaire
In large companies, as a rule the average employee isn’t often asked for an opinion on their career aspirations, areas of interest, or accomplishments outside their job description. It tends to happen once a year — for the performance review. However, many would like to share their thoughts with management much more often. So, when an invitation to take a self-evaluation lands in the inbox, they jump at the chance without hesitation.
How to boost the performance of the whole infosec team
“Security” and “overtime” go hand in hand. According to a recent survey, one in five CISOs works 65 hours a week, not the 38 or 40 written in their contract. Average overtime clocks in at 16 hours a week. The same is true for the rank-and-file infosec employees — roughly half complain of burnout due to constant stress and overwork. At the same time, staff shortages and budget constraints make it very hard to do the obvious thing: hire more people.
Top apps for encrypted, private videocalls
Videocalls became much more widespread after the COVID-19 pandemic began, and they continue to be a popular alternative to face-to-face meetings. Both platforms and users soon got over the teething problems, and learned to take basic security measures when hosting videoconferences. That said, many online participants still feel uncomfortable knowing that they might be recorded and eavesdropped on all the time. Zoom Video Communications, Inc.
Are Electron-based desktop applications secure?
Early this year I gave you five reasons to avoid desktop versions of messengers. The fact that many such applications use the Electron framework is one of them. This means that such a messenger works as an additional browser in your system, and its updates are quite difficult to control. But, as I wrote in that post, it has become clear the problem is much more widespread — affecting not only messengers but hundreds of other apps as well.
How to manage subscription costs
Digital wellbeing isn’t just about privacy and protection against online scammers and equipment failure. It’s also about having some level of control over our social networks, our screen time, and what we spend on digital services. These outlays are increasingly taking the form of subscriptions.
Back-to-school threats: virtual classrooms and videoconferencing
Previous posts in our back-to-school series have covered how to protect your child’s devices and explain the importance of cybersecurity in school. Today we talk about the core, and often unavoidable, apps used in modern education. This means electronic diaries and virtual classrooms, plus videoconferencing for distance learning. They are all insecure. Electronic diaries Electronic study-diaries and virtual classroom websites are used these days to help administer the educational process.
Перестаём бояться генерировать байт-код
Многие, возможно, думают, что работа с байт-кодом Java (будь то чтение или, тем более, генерация) — это какая-то особенная магия, доступная только продвинутым разработчикам с особенно крутым опытом. На самом деле, я считаю такую точку зрения ошибочной. JVM устроена гораздо проще, чем CPU; она оперирует такими высокоуровневыми понятиями как классы, интерфейсы, методы, а не просто лопатит байты в памяти.
Spyware versions of Telegram and Signal on Google Play
For popular messengers such as Telegram, Signal and WhatsApp, there are quite a few alternative clients (not to be confused with clients as in (human) customers; whoever opted this confusing language needs a good talking to) out there. Such modified apps — known as mods — often provide users with features and capabilities that aren’t available in the official clients.
Wrong system time and insecure Secure Time Seeding
Every now and then, Windows 10 users and administrators wonder why the time on their systems suddenly jumps by several weeks, months or even years (either forward or backward). What could be the cause of those jumps? Ars Technica journalists did a little research, and found that it might be linked to the Secure Time Seeding feature. In this post I explain how this feature seems to work, and what can be done to prevent such unexpected jumps. What is Secure Time Seeding?
Ways to protect WordPress sites and blogs from hacking
The creators of any website bear the moral and legal responsibility for it during its entire existence. Moreover, few people know that if a corporate web server gets hacked, it’s not only the company and its customers that may suffer; often, a hacked site becomes a platform for launching new cyberattacks, with its owners not even being aware of it. Why websites get hacked A website hack can be part of a larger cyberattack, or a standalone operation.
Tips for parents sending kids back to school
If you ask parents and kids what their favorite days of the year are, many of the answers will be similar – but there’ll be one key difference. And that day comes to certain days of school… Kids’ favorite school day is typically the last day of the academic year: the onset of summer and freedom – what could be better? Hell, Alice Cooper even wrote a song about it. For parents, this day is often dreaded: it leads to their having to add roles of entertainer, chauffer, chef, nanny, etc.
OSINT: what’s the danger, and how to stay safe
One of the many dangerous tools in cybercriminals’ arsenals is OSINT. In this post, we explain what it is, the danger it poses, and how to guard your company against OSINT. What is OSINT? OSINT stands for open-source intelligence. That is, the collection and analysis of data obtained from publicly accessible information channels.
OSINT: what’s the danger, and how to stay safe
One of the many dangerous tools in cybercriminals’ arsenals is OSINT. In this post, we explain what it is, the danger it poses, and how to guard your company against OSINT. What is OSINT? OSINT stands for open-source intelligence. That is, the collection and analysis of data obtained from publicly accessible information channels.
How to safeguard your kids and their gadgets in the new school year
The start of the new school year plunges many parents back into the traditional routine: packing the kids off to school in the morning, and helping with homework in the evening. However, this ordered life is being disrupted by new technologies, which are rewriting the rules of digital hygiene. As ever, the first who have to get to grips with them are the parents. In this series of posts, we explain what cyberthreats should be front-of-mind for parents in the new school year.
How to safeguard your kids and their gadgets in the new school year
The start of the new school year plunges many parents back into the traditional routine: packing the kids off to school in the morning, and helping with homework in the evening. However, this ordered life is being disrupted by new technologies, which are rewriting the rules of digital hygiene. As ever, the first who have to get to grips with them are the parents. In this series of posts, we explain what cyberthreats should be front-of-mind for parents in the new school year.
Почему WebAssembly плохо годится для Java
Как разработчик TeaVM, компилятора байт-кода JVM в JavaScript и WebAssembly, я часто рекомендую пользователям, почему-то жаждущим сгенерировать WebAssembly, начать с JavaScript. Если честно, бэкэнд WebAssembly я очень давно не развиваю, не реализую в нём недостающих фич и не фикшу баги. Меня спрашивают: а почему так? Обычно, я просто игнорирую подобные вопросы, потому что в двух предложениях ответить на них невозможно, а для того, чтобы писать больше предложений, у меня нет времени.
Measures to protect data when an employee leaves
All large companies have formal processes for both onboarding and offboarding. These include granting access to corporate IT systems after hiring, and revoking said access during offboarding. In practice, the latter is far less effective — with departing employees often retaining access to work information. What are the risks involved, and how to avoid them? How access gets forgotten New employees are granted access to the systems they need for their jobs.
Who gets your digital assets after you die?
That humans are mortal is not news. What is novel, however, is that over the past two decades people have accumulated digital assets that never used to exist. And many of us have probably posed the question at some point: what will happen afterward to all my social media and messenger accounts, all my cloud archives of e-mails and photos, plus domains and websites, not to mention e-wallets and accounts on trading platforms?
Is there an alternative app to Google Authenticator?
2FA How authenticator apps work and what alternatives there are to Google Authenticator. Alanna Titterington February 6, 2023 Many online services allow (and sometimes even require) you to set up two-factor authentication (2FA) with one-time codes. Google Authenticator is the most well-known and widely used authenticator app that generates such codes. Almost all services are compatible with it, and some even provide a link to the app when you set up 2FA.
How to guard against radiation with a cactus
Our colleagues recently investigated the extent of some misconceptions in the field of computer security. And they could hardly not include the best-known security tool of all: the humble cactus. As it turns out, more than a third of respondents (37%) believe that cacti absorb harmful radiation from the monitor. It’s tempting to just dismiss the notion as a myth, but behind every myth lies a grain of truth. In this case, the story is very instructive if you happen to care about your health.
Why contactless payments may not work
A customer holds their handheld device to the POS terminal — but the contactless payment doesn’t work. Why? Maybe the device itself is damaged, or maybe the NFC reader chip is failing, but it could be something else: the POS terminal might be infected with Prilex malware, which hunts for bank cards; and it’s now able to block contactless transactions. What is Prilex and why does it block NFC transactions? Prilex is a cybercriminal group that’s been hunting down bank card data since 2014.
How Kaspersky Password Manager works
passwords We look at how secure password managers are against hacks, and how to protect your passwords as much as possible. Alexey Andreev January 31, 2023 This past year we saw a flurry of news reports about leaks of personal data from various online services and even from popular password managers.
How Kaspersky Password Manager works
This past year we saw a flurry of news reports about leaks of personal data from various online services and even from popular password managers. If you use a digital vault, when you read about such a data leak, you’ll probably start imagining a nightmare scenario: attackers have accessed all your accounts whose passwords are stored in your password manager. How justified are these fears?
Soccer Cyberthreats
Just in case you haven’t noticed, Qatar is currently hosting the 22nd FIFA World Cup (from November 20 to December 18). Cyberfraudsters could hardly pass up such an opportunity. The 2018 World Cup in Russia was watched by 3.6 billion people (more than half of the world’s population over four years old), and the viewing figures of Qatar’s World Cup are unlikely to be lower.
Soccer Cyberthreats
Just in case you haven’t noticed, Qatar is currently hosting the 22nd FIFA World Cup (from November 20 to December 18). Cyberfraudsters could hardly pass up such an opportunity. The 2018 World Cup in Russia was watched by 3.6 billion people (more than half of the world’s population over four years old), and the viewing figures of Qatar’s World Cup are unlikely to be lower.
What a threat-intelligence platform is for
Initially, SIEM systems were created as a tool to collect information about security events within infrastructure and analyze them using external data on known cyberthreats. And for a long time, they did their job just fine. However, as both threats and the information security industry evolve, more and more threat-intelligence feeds are appearing on the market. And what’s more, their structures are significantly changing.
How can they steal my password?
Password leaks are one of the most annoying problems of the digital age. At first glance, it might seem like no big deal: who cares if someone finds out the password to some old e-mail account that is rarely used and contains nothing of value? But then you remember that this same e-mail is linked to your social network accounts, not to mention banking and other apps, and it’s now in cybercriminal hands.
Queryable Encryption in MongoDB
Data leaks have become alarmingly common of late. Cybercriminals use all kinds of tricks to gain access to databases and the records stored there. The most logical way to secure databases would be to use encryption, but this is often impractical. After all, the more often a service needs to access a database, the slower it will respond. And if that database is also encrypted, the response time may be even higher.
Interview with Valter Generoso
Valter got his first job straight after leaving school at the age of 16, and had various different jobs since then — from shoe seller to poker croupier! Today, he has two beautiful daughters, an MBA in Information Security, and a job with Kaspersky supporting its B2B customers in Latin America. — Just curious: in our corporate email you’re listed as Valter Generoso, but in our company database, you’re down as Valter Silva. What gives?! — Well, my full name is Valter Generoso Silva.
How phishers prey on Wise / TransferWise users
Attackers often send phishing e-mails in the name of well-known companies to extract credentials for users’ personal accounts, phone numbers and other information that can be useful for scams or account takeovers. Of course, among the most attractive targets for phishers are clients of financial organizations such as banks, cryptoexchanges, payment systems and the like.
How to find out what your kids are interested in
First it was Minecraft and Fortnite. Then my youngest took a fancy to stunt scooters — “spots,” “ramps” and various brands and names of tricks appeared in his vocabulary, some of which were extremely hard for me to decipher. Example? Easy: try figuring out what 540 is. Now he’s into graffiti. I hope that his “pieces”, “tags” and “burners” on the walls of derelict buildings eventually give way to the more serene realm of calligraphy and design.
Follina (CVE-2022-30190): a vulnerability in MSDT
Researchers have discovered another serious vulnerability in Microsoft products that potentially allows attackers to execute arbitrary code. MITRE designated this vulnerability as CVE-2022-30190, while researchers somewhat poetically named it Follina. The most disturbing thing is that there is no fix for this bug yet. What’s even worse, the vulnerability is already being actively exploited by cybercriminals.
Rosemarie Gonzales: “It's important to free yourself of misconceptions”
interview Meet Rosemarie Gonzales, Corporate Communications Manager at Kaspersky Southeast Asia. Alexey Andreev May 27, 2022 Rosemarie was born in the Philippines but now lives in Malaysia, while her husband is from India. After work she reads books and writes poetry. She hopes to one day write a travel haiku diary in Japan. Her work is rather international too: at Kaspersky Rosemarie is a Corporate Communications Manager for Southeast Asia (SEA).
Critical vulnerabilities in VMWare products
On May 18 VMware patched two vulnerabilities in its products: CVE-2022-22972 and CVE-2022-22973. To emphasize the severity of the problem, on the same day the US Department of Homeland Security issued a directive obliging all Federal Civilian Executive Branch (FCEB) agencies to close these vulnerabilities in their infrastructure within five days — by installing patches, and if this is not possible, by removing VMware products from the agency network.
Ivan Kwiatkowski: "Cybersecurity is a domain I fell into by accident"
Ivan lives in Clermont-Ferrand, in the very center of France. He writes fantasy novels, skydives on occasion, and wants his life to be memorable every day. He’s also a member of the Global Research and Analysis Team (GReAT), Kaspersky’s group of top experts who uncovered Carbanak, Cozy Bear, Equation and many other threat actors and their sophisticated malware across the world. – Ivan, looking at your name I couldn’t help but start with this question: do you have some Slavic roots? – More or less.
How does the mute button actually work?
Over the two years of the pandemic, millions of people learned to use numerous remote collaboration tools. If previously users thought little about security, after the massive uptake of such services, they started paying far more attention to it. Interest in the security of conferencing software has yet to abate, in which regard researchers at three U.S. universities published a study on whether the microphone mute button in popular tools actually does what it says on the tin.
How does the mute button actually work?
Over the two years of the pandemic, millions of people learned to use numerous remote collaboration tools. If previously users thought little about security, after the massive uptake of such services, they started paying far more attention to it. Interest in the security of conferencing software has yet to abate, in which regard researchers at three U.S. universities published a study on whether the microphone mute button in popular tools actually does what it says on the tin.
How does the mute button actually work?
Over the two years of the pandemic, millions of people learned to use numerous remote collaboration tools. If previously users thought little about security, after the massive uptake of such services, they started paying far more attention to it. Interest in the security of conferencing software has yet to abate, in which regard researchers at three U.S. universities published a study on whether the microphone mute button in popular tools actually does what it says on the tin.
Gabriel Mitacchione: “People love our product, but their bosses…”
Gabriel loves to play football (soccer!) and electric guitar, and he’s a fan of all things blockchain technology and the NFT ecosystem. But life hasn’t been easy for him: he had to leave his parents in Venezuela and immigrate to Spain, where he started working at Kaspersky in the middle of the covid lockdown. In this interview, Gabriel tells us about his journey to cybersecurity. – Growing up in Venezuela, how was it?
New BlackCat ransomware
No market tolerates emptiness and that alos applies to ransomware. After the BlackMatter and REvil gangs ceased their operations, the emergence of new players was only a matter of time. And here is one of them — last December, advertisements for the services of the ALPHV group, also known as BlackCat, appeared on hacker forums.
New BlackCat ransomware
No market tolerates emptiness and that applies to ransomware too. After the BlackMatter and REvil gangs ceased their operations, the emergence of new players was a matter of time. And here is one of them — last December advertisements for the services of the ALPHV group, also known as BlackCat, appeared on hacker forums.
Jeffrey Esposito: "I thought it was a boring industry"
Jeffrey lives outside Boston with his wife and two kids. While brewing beer is still a great passion of his, his main hobby now is gardening — growing peppers for making super-hot sauces with. But in this interview, Jeff tells us how his life is greatly influenced by his work — as the Head of Regional Social Media at Kaspersky. – Let’s start from the beginning. When you were a child, you weren’t even able to dream about working for a cybersecurity company, since there was no such thing back then.
What’s going on with cybersecurity in space
It is common knowledge that fantasy authors love sending asteroids or pieces of the Moon careening toward Earth. But the film Moonfall, which is coming to a movie theater near you in February, focuses not on a natural disaster but on something that looks like an artificial, technology-based threat. And you may spot the name Kaspersky among the protection technologies used in this space thriller. Don’t worry — we won’t be giving away any movie spoilers here.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Alexey
Contact Alexey, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack