Kaspersky (US)

» see usa.kaspersky.com as it lived, on the wayback machine

~ the obit ~

kaspersky itself did not die. the us version of kaspersky died. this grave is specifically for the united states arm: the boxes on best buy shelves through the 2000s and the corporate rollouts in mid-market american offices. all of it got cut off in september 2024 by a united states department of commerce order signed 20 june 2024 by secretary gina raimondo. the reason on paper was that kaspersky, being headquartered in moscow, presented an unacceptable national security risk under the executive orders on russian tech.

in fairness the accusation had been percolating since 2017. that year the trump administration banned kaspersky from federal government computers over allegations that the software had been used to exfiltrate NSA hacking tools from a contractor's home pc. kaspersky denied it. federal agencies stopped using kaspersky after that, but consumer and enterprise sales in the us kept going for another seven years. the 2024 order finally closed the consumer window.

the sales ban went into effect 20 july 2024. no new licenses, no renewals through us channels. software updates, including signature updates for existing customers, were to stop after 29 september 2024. kaspersky did not stick around to let a million us pcs go unpatched. it sold its us book of business to pango group, the boston company behind hotspot shield and other consumer security brands, and pango migrated everyone onto its own product called ultraav.

~ the rap sheet ~

~ the forced swap ~

the migration went out through kaspersky's own installed client on 19 september 2024. a lot of windows users woke up to find kaspersky uninstalled and ultraav sitting in its place, without ever clicking accept. techcrunch and the register lit up with people asking whether they had been hacked. they had not been hacked. the swap was legitimate. it was just a badly communicated automatic uninstall-and-replace push that looked exactly like malware behavior to anyone reading their own event log.

pango's public line was that the ultraav engine was a third-party detection stack, not repackaged kaspersky code. researchers who reverse-engineered it in the weeks after said the engine identifiers pointed to a different signature backend. the migration itself was clean. the trust broken was the "how", not the "what".

~ where kaspersky still lives ~

turkey, europe, latin america, southeast asia, and most of africa still get kaspersky. from ankara in 2026 the product line is still on the shelf at any it retailer, the free tier still installs, definition updates still land on the hour. the company reports around 400 million users worldwide including its business lines. the us just carved itself out of that map.

[[windows-live-onecare]] died for market reasons. kaspersky (us) died for policy reasons. before 2017 nobody expected an antivirus product to be geopolitically shut down. after 2024 nobody assumes it cannot happen again.

~ what survived ~

a very specific new pattern in consumer software: the forced regional handoff. a customer sees no ui change during purchase but the underlying vendor gets swapped by regulatory pressure. huawei phones and now consumer antivirus have both rehearsed some version of this. from the user's terminal the update was silent. from the vendor's side it was the end of a twenty year us retail presence.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »