[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-83":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-83","SP 800-83","SP 800-83 Rev. 1: Guide to Malware Incident Prevention and Handling for Desktops and Laptops",17,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on preventing malware incidents and responding to them when they occur, focused on desktops and laptops. It covers awareness, vulnerability mitigation, threat mitigation tools and defensive architecture, then the incident handling steps of detection, containment, eradication and recovery.\n\n**In practice.** Organisations combine hardening, timely patching, endpoint protection, application control and user awareness to reduce infection, and maintain procedures for analysing and containing infected hosts. Response planning covers isolation, identification of the malware and affected systems, and safe restoration. Evidence includes endpoint protection coverage, response procedures and incident records.\n\n**Common gaps.** Common gaps are relying on antivirus alone, incomplete endpoint coverage and reimaging hosts without understanding how the infection occurred. Lessons from malware incidents are also seldom fed back into hardening or awareness.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"clickfix-malware-uses-dns-txt-records-and-browser-caching-to-evade-detection","ClickFix Malware Uses DNS TXT Records and Browser Caching to Evade Detection","2026-10-06T22:21:27.48+00:00",{"slug":23,"title":24,"published_at":25},"fake-security-alerts-via-google-ads-target-hundreds-of-organizations","Fake Security Alerts via Google Ads Target Hundreds of Organizations","2026-09-28T20:22:33.802+00:00",{"slug":27,"title":28,"published_at":29},"23-year-botnet-dismantled-lessons-from-salitys-long-run","23-Year Botnet Dismantled: Lessons from Sality's Long Run","2026-09-02T18:20:19.224+00:00",{"slug":31,"title":32,"published_at":33},"23-year-old-sality-botnet-finally-disrupted-after-decades-of-malware-distribution","23-Year-Old Sality Botnet Finally Disrupted After Decades of Malware Distribution","2026-09-02T10:21:43.734+00:00",{"slug":35,"title":36,"published_at":37},"grandoreiro-banking-trojan-returns-with-stronger-evasion-capabilities","Grandoreiro Banking Trojan Returns With Stronger Evasion Capabilities","2026-08-20T14:20:35.506+00:00",{"slug":39,"title":40,"published_at":41},"macsync-stealer-uses-rotating-domains-to-evade-detection-on-macos","MacSync Stealer Uses Rotating Domains to Evade Detection on macOS","2026-08-18T20:21:33.916+00:00",{"slug":43,"title":44,"published_at":45},"kimwolf-botnet-resurfaces-with-blockchain-c2-and-browser-camouflage","Kimwolf Botnet Resurfaces with Blockchain C2 and Browser Camouflage","2026-08-12T02:20:23.75+00:00",{"slug":47,"title":48,"published_at":49},"ransom-cartel-creator-sentenced-raas-operations-demand-stronger-ransomware-defenses","Ransom Cartel Creator Sentenced: RaaS Operations Demand Stronger Ransomware Defenses","2026-08-06T00:21:09.139+00:00",{"slug":51,"title":52,"published_at":53},"cruciferra-crypter-bypasses-edr-using-byovd-and-process-ghosting-techniques","Cruciferra Crypter Bypasses EDR Using BYOVD and Process Ghosting Techniques","2026-07-27T12:21:14.473+00:00",{"slug":55,"title":56,"published_at":57},"residential-proxy-botnets-surge-to-60-million-ips-despite-repeated-takedowns","Residential Proxy Botnets Surge to 60 Million IPs Despite Repeated Takedowns","2026-07-24T20:20:36.843+00:00",{"slug":59,"title":60,"published_at":61},"golden-chickens-maas-evolves-with-modular-malware-arsenal","Golden Chickens MaaS Evolves With Modular Malware Arsenal","2026-07-24T13:20:36.754+00:00",{"slug":63,"title":64,"published_at":65},"clickfix-maas-ecosystem-evades-traditional-defenses-demands-new-detection-tactics","ClickFix MaaS Ecosystem Evades Traditional Defenses, Demands New Detection Tactics","2026-07-14T18:21:53.139+00:00",[67,72,77,82,87,91],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",14,{"slug":73,"name":74,"problem":75,"stories":76},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",9,{"slug":78,"name":79,"problem":80,"stories":81},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",6,{"slug":83,"name":84,"problem":85,"stories":86},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",5,{"slug":88,"name":89,"problem":90,"stories":86},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",{"slug":92,"name":93,"problem":94,"stories":95},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",4,[97,103,108,113,118,123,128,132],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","13","Control 13","Network Monitoring and Defense",11,{"family":104,"item":105,"code":106,"title":107,"together":76},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":5,"item":109,"code":110,"title":111,"together":112},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",8,{"family":114,"item":115,"code":116,"title":116,"together":117},"itil","overview","ITIL",7,{"family":119,"item":120,"code":121,"title":122,"together":117},"gdpr","32","Article 32","Security of processing",{"family":124,"item":125,"code":126,"title":127,"together":117},"nist-800-53","si-3","SI-3","Malicious Code Protection",{"family":98,"item":129,"code":130,"title":131,"together":117},"10","Control 10","Malware Defenses",{"family":98,"item":133,"code":134,"title":135,"together":86},"9","Control 9","Email and Web Browser Protections"]