Kaspersky Expands Cyberattack Simulation for IT Organisations

Kaspersky has expanded its Kaspersky Interactive Protection Simulation (KIPS) with new cyberattack scenarios tailored for IT organisations. The update introduces simulations covering deepfake-enabled fraud, supply chain compromise, trusted relationship attacks and destructive wiper malware, aimed at helping businesses assess their readiness against increasingly complex threats.

IT companies remain a prime target for cybercriminals. As attack methods combine social engineering, supply chain breaches and ransomware, organisations are under pressure to strengthen response capabilities. This has increased the need for practical training that reflects real-world threats. Kaspersky Interactive Protection Simulation is designed to improve coordination between CISOs, IT teams and senior management by placing participants in simulated cyber incidents that highlight both technical and business impacts.

Updated Attack Scenarios

The latest version of KIPS introduces scenarios based on attack techniques observed in active campaigns targeting the IT sector. Participants may encounter:

• Binary Backdoor in the Build: A supply chain attack that compromises software during signing, packaging or distribution, allowing data theft and persistent access once deployed.
• DeepFake Boss: A social engineering attack using AI-generated voice and video to impersonate executives and trigger unauthorised financial transactions.
• Trusted Relationship Attack (VPN): Exploitation of third-party access and remote tools to enter corporate systems through vendors or service providers.
• Wiper Attack (Babuk): A destructive malware scenario based on leaked Babuk ransomware code, testing resilience against data loss and system shutdown.

Deployment and Cyber Resilience

IT organisations can choose between dedicated scenarios to test coordination, crisis management and decision-making under pressure. KIPS is available in live sessions for up to 100 participants and online formats supporting up to 1,000 users, with analytics on decision-making, team performance and benchmarking.

According to Svetlana Kalashnikova, effective cybersecurity requires more than just technology. Organisations also need strong processes and informed teams that can respond quickly under pressure. She noted that simulation-based training helps translate complex threats into practical learning experiences, improving coordination and strengthening overall resilience.