Spyware Code Left Digital Clues Pointing to Memento

[johnblockbuster]

Kaspersky confirmed the spyware’s origin after discovering the word “DANTEMARKER” embedded in the code — a clear reference to Memento’s Dante system.
The Italian firm had previously mentioned Dante publicly at surveillance industry events.
Kaspersky said the threat actor using Dante showed fluency in Russian but made small linguistic errors, indicating non-native speakers behind the campaign.
The operation targeted participants of Russian political forums, leveraging Chrome zero-day vulnerabilities, though Memento denied developing that exploit.