Cover image for a NetamLoader malware report on a government Windows Update folder

NetamLoader Malware: One Government PC, No Actor

Kaspersky detailed NetamLoader malware this week: a previously undocumented .NET loading framework found on one government Windows 10 system in Asia. The artifact was detected in the first half of 2026. The files sat inside Windows Update download folders and started through components of Patch My PC, Windows endpoint and patch-management software. The Windows PCs used to administer websites warrant scrutiny even when the CMS shows no signs of compromise.

Read More