On Thursday, Kaspersky, the Russian cybersecurity firm, unexpectedly removed its antivirus software from U.S. customers’ computers and replaced it with UltraAV, a product by Pango Group.

This sudden move follows Kaspersky’s decision to shut down its U.S. operations after the company was added to the U.S. Entity List in June, marking it as a national security risk. The U.S. government also announced a ban on Kaspersky software updates and sales starting September 29, 2024.

In September, Kaspersky informed users via email that UltraAV would take over their cybersecurity needs once Kaspersky stopped servicing U.S. customers. However, the emails did not mention the immediate removal of Kaspersky’s software or the forced installation of UltraAV.

Users Express Concern Over UltraAV’s Forced Installation
Numerous users reported on forums that UltraAV was automatically installed without warning, with some fearing their devices had been compromised. Many tried to uninstall the new software, but in some cases, it reappeared after rebooting, increasing concerns.

Additionally, users with Kaspersky VPN subscriptions discovered UltraVPN had also been installed on their systems. UltraAV, though less known, is part of Pango Group, which owns multiple VPN brands, including Hotspot Shield.

UltraAV’s website reassured Kaspersky customers that their devices would automatically switch to UltraAV’s protection once the transition was complete. It also warned that Kaspersky would no longer provide updates or support after September 30, 2024, leaving users vulnerable to cyber threats.