Scan.generic.portscan.udp Kaspersky Apr 2026

She ran a memory dump. The laptop’s RAM contained a tiny, nameless process – a binary that had arrived via a phishing PDF three days ago, undetected until now. The PDF was an invoice. Derek, sleep-deprived with a newborn, had clicked it at 2 AM.

“Probably a worm,” she muttered, isolating the device. But Kaspersky’s behavioral engine flagged something else: the scan wasn’t random. It was probing port 161 (SNMP) and port 137 (NetBIOS) in a slow, rhythmic pattern. Not a scan for vulnerabilities. A scan for echoes . scan.generic.portscan.udp kaspersky

Maya, the night shift SOC analyst, frowned. A UDP port scan from a marketing laptop at three in the morning was either a misconfigured backup script or something far worse. She pulled up the logs. She ran a memory dump

Maya killed the laptop’s network port. Then she called Derek. “Congratulations on the baby. Now, about your computer…” Derek, sleep-deprived with a newborn, had clicked it at 2 AM

He never even knew his machine had been whispering to the void. But the void had almost whispered back.

Kaspersky had caught it not as an exploit, but as a behavior – the generic signature of something feeling its way through the dark.