Eugene Kaspersky

He has been an advocate for an international treaty prohibiting cyberwarfare. Kaspersky graduated from The Technical Faculty (cryptology) of the KGB Higher School in 1987 with a degree in mathematical engineering and computer technology. His interest in IT security began when his work computer was infected with the Cascade virus in 1989 and he developed a program to remove it. Kaspersky helped grow Kaspersky Lab through security research and salesmanship. He became the CEO in 2007 and remains so as of 2024.

• Name — Eugene Kaspersky • Born — 4 October 1965 • Birthplace — Novorossiysk, Krasnodar Krai, Soviet Union • Children — 5 • Education — IKSI • Occupation — Chairman and CEO of Kaspersky Lab • Known for — Founder of Kaspersky Lab • Awards — State Prize of the Russian Federation

Kaspersky was born on 4 October 1965 in Novorossiysk, Soviet Union. He grew up near Moscow, where he moved at age nine. His father was an engineer and his mother a historical archivist. As a child he developed an early interest in math and technology. He spent his free time reading math books and won second place in a math competition at age 14. When he was fourteen, Kaspersky began attending A.N. Kolmogorov boarding school, run by Moscow University, specializing in mathematics. He was also a member of the Komsomol. At the age of 16, Kaspersky entered a five-year program with The Technical Faculty of the KGB Higher School, which prepared intelligence officers for the Russian military and KGB. He graduated in 1987 with a degree in mathematical engineering and computer technology. After graduating college, Kaspersky served the Soviet military intelligence service as a software engineer. He met his first wife Natalya Kaspersky at Severskoye, a KGB vacation resort, in 1987.

Kaspersky's interest in IT security began in 1989, when his PC was infected by the Cascade virus, while working for the Ministry of Defence. He studied how the virus worked and developed a program to remove it. Afterwards he continually found new viruses and developed software to remove them, as a hobby. Early on Kaspersky's anti-virus software had just 40 virus definitions and was distributed mostly to friends. In 1991, Kaspersky was granted an early release from his military service and left the defense ministry to take a job at the Information Technology Center of a private company KAMI, in order to work on his antivirus product full-time. There, he and his colleagues improved the software and released it as a product called Antiviral Toolkit Pro in 1992. At first the software was purchased by about ten clients per month. It earned about $100 per month, mostly from companies in Ukraine and Russia. Kaspersky's then-future wife Natalya Kaspersky became his coworker at KAMI. In 1994, Hamburg University in Germany gave Kaspersky's software first place in a competitive analysis of antivirus software. This led to more business for Kaspersky from European and American companies. Kaspersky Lab was founded three years later by Kaspersky, his wife and Kaspersky's friend Alexey De-Monderik. Natalya, who pushed Eugene to start the company, was the CEO, while Eugene was the head of research. The following year, the CIH virus (AKA the Chernobyl virus) created a boon for Kaspersky's anti-virus products, which Kaspersky said was the only software at the time that could cleanse the virus. According to Wired, "their software was advanced for the time." For example, it was the first software to monitor viruses in an isolated quarantine. Kaspersky's company grew quickly in the late 1990s. From 1998 to 2000, its annual revenue grew 280 percent and by 2000 almost sixty percent of revenues were international. By 2000, it had a staff of 65 people, starting from 13 in 1997. The antivirus product was renamed to Kaspersky Antivirus in 2000, after an American company started using the product's original name, which wasn't trademarked. In 2023, after switching to a subscription model, Kaspersky Anti-Virus became Kaspersky Standard and Kaspersky Internet Security was replaced by Kaspersky Plus.

As the head of research, Kaspersky authored papers on viruses and went to conferences to promote the software. He was often quoted in the technology press as an antivirus expert. He helped establish the company's Global Research and Expert Analysis Team (GReAT), which helps corporations and governments investigate IT security threats. Initially he told his team not to discuss cyber-terrorism publicly, to avoid giving governments ideas on how to sabotage their political opponents. After the American film Live Free or Die Hard (AKA Die Hard 4.0) (2007) was released, Kaspersky said the idea was now public. He hired the researcher that identified the Stuxnet worm, which is believed to be the first instance of state-sponsored cyberweapon. Afterwards, the company exposed the Flame virus at the request of the International Telecommunication Union. The virus was believed to have been used for cyber-espionage in Middle-Eastern countries. Kaspersky Lab developed a reputation for discovering cybersecurity threats. In 2015 Kaspersky and Kaspersky Lab discovered a group of hackers known as Carbanak that were stealing money from banks. They also exposed Equation Group, which developed advanced spyware for monitoring computer use and was believed to be affiliated with the National Security Agency in the U.S. According to The Economist, it was these discoveries, Kaspersky's "relentless salesmanship" and the company's anti-virus product that made Kaspersky Lab uncommon as an internationally recognized Russian company.

Kaspersky became CEO of Kaspersky Lab in 2007. According to a 2008 article in USA Today, he traveled to 20 to 30 countries per year promoting Kaspersky Lab products. In early 2009, CRN said his personality contributed to the company's growth from "relative obscurity to now nipping at the heels of its larger, better-known rivals." At the time, Kaspersky Lab was the fourth largest endpoint security company. It introduced new products for the enterprise market and expanded its channel programs. In 2011, Kaspersky made a decision against taking the company public, saying it would make decision-making slow and prevent long-term R&D investments. This led to a series of high-level departures from the company, including his ex-wife and co-founder. Another series of departures occurred in 2014 due to disagreements over how to run the company. Kaspersky himself is the co-author of several patents, including one for a constraint-and-attribute-based security system for controlling software component interaction. As of 2015, Kaspersky Lab employed more than 2,800 people. As of 2012, Kaspersky was working on developing software to protect critical infrastructure, like power plants, from cyberwarfare. In 2013, the company reported revenues of $667 million, which grew to $721 million in 2023. Also during this period, Kaspersky expanded its cybersecurity offerings. In 2012, it announced plans to develop a secure operating system to protect critical infrastructure systems from online attacks. By 2023, the company launched SD-WAN and Kaspersky Container Security, contributing to a 44% growth in non-endpoint solutions. The company faced geopolitical challenges, notably in 2017, when the U.S. government banned its software over alleged ties to the Russian government, which Kaspersky denied. In June 2023, it reported a cyberattack targeting its senior staff's iPhones, which had been ongoing since 2019. In June 2024, following further U.S. sanctions, Kaspersky withdrew from the U.S. market, later replacing its software on American users' systems with UltraAV. Despite these challenges, Kaspersky Lab maintains presence in Europe, Asia, Middle East and Latin America and expanded product range.

Kaspersky Lab has defended itself against allegedly frivolous patent claims more aggressively than most IT companies. In 2012, it was the only one of 35 firms named in a suit by patent troll Information Protection and Authentication (IPAC) to take the case to court, rather than pay a fee. The case was ruled in Kaspersky's favor. Also in 2012, another company, Lodsys, sued Kaspersky and 54 other companies for patent infringement, and that case also resulted in the claimant dropping the case against Kaspersky. In 2016, Kaspersky Lab faced a claim from the American company Wetro Lan, which alleged that the company had infringed US patent No. 6795918B1. This patent, obtained in 2000, described "service level computer security" technology related to data packet filtering. After brief negotiations, the parties agreed on a payment of $5,000 to Kaspersky Lab and the waiver of any future claims on their part. In 2018, a Texas district court dismissed Uniloc's lawsuit against Kaspersky Lab for infringement of US patent 5490216. According to an article in TechWorld, the company's aversion to settling these claims is most likely because Eugene "just hates" patent trolls. In his blog he called them "parasites" and "IT racketeers". Kaspersky aims not only to settle lawsuits, but to invalidate patents being misused by NPEs.

Kaspersky is influential among politicians and security experts. He has warned about the possibility of cyberwarfare that targets critical infrastructure. He speaks at conferences advocating for an international cyberwarfare treaty, that would ban government-sponsored cyberattacks. After the Stuxnet attack, Kaspersky proposed that the Internet needed more regulation and policing. One idea was to have some parts of the Internet anonymous, while more secure areas require user identification. He argued that anonymity mostly benefited cybercriminals and hackers. For example, accessing a nuclear power plant network could require a verified identity through a digital passport. Kaspersky said anonymity on the Internet could be protected by using a proxy, whereby a responsible international body maintains a record of which online identities correspond to which real-world ones. For example, a person's identity would be revealed in cases of malicious activity. Some security experts believe that a centralized database of the real-world identities of Internet users would be "a privacy disaster and a highly attractive target for thieves." The Age said it "sounds a little too close for comfort to a Big Brother scenario" and Wired said Kaspersky's views were highly aligned with the Russian government's agenda. In 2012, Kaspersky ranked 40th in the Foreign Policy magazine's Top 100 Global Thinkers yearly rating. Many organizations have been considering reducing privacy to improve security as a result of Kaspersky's arguments. In a more recent Slashdot interview Kaspersky said the Internet should be divided into three zones: a red zone for voting, online banking, and other "critical transactions" that would require an Internet ID; a grey zone that may require only verification of age to access the site, but not identity; and a green zone for blogs, news, and "everything related to your freedom of speech." He proposes "special proxies" for red zone websites that allow disclosure of the user's identity only in the case of suspected malfeasance.

Kaspersky's alleged prior work as a GRU cryptologist and GRU officer in the Soviet army and his education at a KGB-sponsored technical college has led to controversy about whether he uses his position to advance Russian government interests and intelligence efforts. Wired said Kaspersky's critics accuse him of using the company to spy on users for Russian intelligence. Russian telecommunications companies for example are required by federal law in Russia to cooperate with the government's military and spy operations if asked. Kaspersky said his company has never been asked to tamper with its software for espionage and called the accusations "cold war paranoia". According to Wired, Kaspersky staffers argue "not unconvincingly" that spying on users would hurt its business and its relationship with the Russian FSB, the KGB's successor, is limited. According to Gartner, "There's no evidence that they have any back doors in their software or any ties to the Russian mafia or state... but there is still a concern that you can't operate in Russia without being controlled by the ruling party." Computing mocked some of the more extreme accusations of espionage, but said it would be unlikely for a Russian business to grow to the size of Kaspersky Lab without relationships within the Russian government. NPR journalists also said it was unlikely Kaspersky was using its software for espionage, because it would be risky for the company's business, but said Kaspersky showed an unusual disinterest in Russia-based cybercrime. In August 2015, Bloomberg reported that Kaspersky Lab changed course in 2012. According to the publication, "high-level managers have left or been fired, their jobs often filled by people with closer ties to Russia's military or intelligence services. Some of these people actively aid criminal investigations by the FSB using data from some of the 400 million customers". Bloomberg and The New York Times also said Kaspersky was less aggressive about identifying cyberattacks originating from Russia than from other countries, allegations Kaspersky refutes. For example, he allegedly ignored or downplayed a series of denial-of-service attacks in December 2011 that were made to disrupt online discussion criticizing Russian politicians. Kaspersky also allegedly ignored a Russian-based spyware called Sofacy, which is believed to have been used by Russia against NATO and Eastern Europe. On the other hand, Kaspersky also published information on the Russia-based Crouching Yeti cyberattacks two days before Bloomberg accused him of ignoring Russia-based cyberattacks. At the time, the company had published eleven reports on malicious Russian programs. Competitor FireEye said it is awkward even in the U.S. to investigate cybercrimes performed by one's own government. A March 2015 article in Bloomberg said an increasing number of executive staff at Kaspersky Lab previously worked for Russian military and intelligence agencies. According to News & Observer, Kaspersky "published a mammoth response, tearing down Bloomberg's accusations and accusing them of throwing facts out the window for the sake of a juicy anti-Russian narrative." Competitor FireEye said many U.S. IT companies also have executives that formerly worked for government military and intelligence agencies. NPR reported that Kaspersky has been doing an increasing amount of business with Russian cybersecurity agencies to catch cybercriminals. Kaspersky confirmed that Russian agencies are among its government customers. In May 2017, the allegations resurfaced when US National Security Agency (NSA) director Mike Rogers told a US Senate Intelligence committee that the NSA was reviewing the US government's use of Kaspersky software for fear it would allow Russian intelligence services to conduct spy operations or launch cyber attacks against American digital infrastructure. ABC reported that the Department of Homeland Security had issued a secret report in February on possible connections between Kaspersky Lab and Russian intelligence, and that the FBI was currently investigating the matter. According to Defense Intelligence Agency (DIA) director Vincent Stewart, his agency is "tracking Kaspersky and their software." In a press release, Eugene Kaspersky denied that his software is currently, or could be, used for such purposes, stating that "As a private company, Kaspersky Lab has no ties to any government, and the company has never helped, nor will help, any government in the world with its cyber-espionage efforts." He also stated that the US does not want to use his company's software for political reasons, and called the allegations "unfounded conspiracy theories". Alleging connections to Russian intelligence, the U.S. Department of Homeland Security in 2017 banned Kaspersky's main antivirus product from U.S. federal networks. In 2024 the U.S. Commerce Department announced that "Kaspersky will generally no longer be able to, among other activities, sell its software within the United States or provide updates to software already in use." Kaspersky is one of many Russian oligarchs named in the Countering America's Adversaries Through Sanctions Act, CAATSA, signed into law by President Donald Trump in 2017.

In August 2015, two former Kaspersky employees alleged that the company introduced modified files into the VirusTotal community anti-virus database to trick its rivals' programs into triggering false positives. The result of the false positives was that important uninfected files would be disabled or deleted. The allegations also claimed that Kaspersky himself had ordered some of the actions, specifically targeting competitors, including Chinese companies he felt were copying his software. Emails dated 2009, two years after Kaspersky became CEO, were allegedly leaked to Reuters, one of which allegedly had Kaspersky threatening to go after competitors by "rubbing them out in the outhouse", using a phrase popularized by Vladimir Putin. The company denied the allegations.

Kaspersky was ranked #1,567 on Forbes "Billionaires List 2017" with a net worth of US$1.3 billion (as of March 2017). He first made the list in 2015 when his net worth reached US$1 billion.

Kaspersky lives in Moscow, Russia with his wife and five children. He and his first wife were divorced in 1998. On 21 April 2011, his son, Ivan, then 20, was kidnapped for a $4.4 million ransom. Kaspersky worked with a friend at the FSB and Russian police to trace the ransomer's phone call. They set up a trap for the ransomers, where they rescued his son and arrested many of the kidnappers. The incident had an influence on Kaspersky's sense of personal security. He now travels with a bodyguard and security detail. Kaspersky is one of the richest people in Russia. His net worth is about $1 billion. According to Wired, he has "cultivated the image of a wild man with cash to burn." He has an interest in racing and drives his sports cars on race tracks as a hobby. He sponsors various "quirky or scientific projects" such as the Ferrari Formula One racing team or archaeological excavations in Akrotiri (prehistoric city). Kaspersky owns a BMW M3. Kaspersky describes himself as an "adrenaline junkie". He has gone hiking on volcanoes in Russia and reserved a trip to space on the Virgin Galactic. Kaspersky is known for shunning formal attire, typically dressing in jeans and a shirt. He supports university projects and competitions in the IT security field. Kaspersky is a passionate traveller and even funded an investment accelerator for projects developing sustainable tourism. He consistently shares travel photos and notes in his personal blog, and maintains the list "Top-100 must-see places in the world." Kaspersky supported a women's expedition to the South Pole (Kaspersky Commonwealth Antarctic Expedition) led by Felicity Aston in 2009 and the first solo crossing of Antarctica by a woman (Kaspersky ONE Transantarctic Expedition) in 2011, also completed by Felicity Aston. Eugene's company was the official cybersecurity partner for the FIDE World Championship series of chess tournaments.