BYOVD

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

• Malware
• Vulnerability Report

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

Do Son October 24, 2025 0

Researchers from Symantec and Carbon Black have published a detailed analysis of Warlock ransomware, a newly emerging...

Read More Read more about Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

Researcher Demonstrates Local Privilege Escalation in Legacy Windows Modem Driver Exploited in the Wild

• Vulnerability

Researcher Demonstrates Local Privilege Escalation in Legacy Windows Modem Driver Exploited in the Wild

Do Son October 22, 2025 0

Security researcher Jordan Jay has published an extensive technical breakdown of CVE-2025-24990, a high-severity Elevation of Privilege...

Read More Read more about Researcher Demonstrates Local Privilege Escalation in Legacy Windows Modem Driver Exploited in the Wild

GOLD SALEM: A New Ransomware Group Is Exploiting SharePoint Flaws

• Malware

GOLD SALEM: A New Ransomware Group Is Exploiting SharePoint Flaws

Do Son September 22, 2025 0

Researchers from the Sophos Counter Threat Unit (CTU) have published new intelligence on a rising ransomware group...

Read More Read more about GOLD SALEM: A New Ransomware Group Is Exploiting SharePoint Flaws

kkRAT: A New Malware Blends Crypto Hijacking with Legitimate RMM Tools

• Malware

kkRAT: A New Malware Blends Crypto Hijacking with Legitimate RMM Tools

Do Son September 12, 2025 0

Zscaler ThreatLabz has identified a sophisticated malware campaign active since early May 2025, targeting Chinese-speaking users with...

Read More Read more about kkRAT: A New Malware Blends Crypto Hijacking with Legitimate RMM Tools

Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor

• Cybercriminals

Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor

Do Son September 1, 2025 0

Check Point Research (CPR) has uncovered a sophisticated campaign by the Silver Fox APT group leveraging a...

Read More Read more about Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor

BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware

• Malware
• Vulnerability Report

BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware

Do Son August 7, 2025 0

A recent incident response operation in Brazil has revealed a stealthy and destructive threat abusing the trusted...

Read More Read more about BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware

Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework

• Cybercriminals

Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework

Do Son August 4, 2025 0

Check Point Research (CPR) has detailed a previously undocumented Chinese-affiliated threat actor—Storm-2603—linked to aggressive campaigns exploiting Microsoft...

Read More Read more about Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework

CrazyHunter Ransomware Targets Taiwan’s Critical Infrastructure

• Cybercriminals
• Malware

CrazyHunter Ransomware Targets Taiwan’s Critical Infrastructure

Do Son April 17, 2025 0

Trend Micro has uncovered a targeted ransomware campaign conducted by a newly identified threat group dubbed CrazyHunter....

Read More Read more about CrazyHunter Ransomware Targets Taiwan’s Critical Infrastructure

Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers

• Malware

Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers

Do Son November 21, 2024 0

The Trellix Advanced Research Center has uncovered a malicious campaign that turns trusted security tools against their...

Read More Read more about Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers