Threat actorcritical
EncryptHub abuses Brave Support in new campaign exploiting MSC EvilTwin flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-26633 | Local Security Feature Bypass in Microsoft Windows Management Console (MMC) | 7.0 | 30% | KEVRansomwarePoC ×2 | KEV |
From the original article
2 min read at securityaffairs.com
EncryptHub actor exploits Windows flaw CVE-2025-26633 (“MSC EvilTwin”) with rogue MSC files and social engineering to drop malware. The threat actor EncryptHub exploits the now-patched Windows flaw CVE-2025-26633 (“MSC EvilTwin”) using rogue MSC files and social engineering to deliver malware, warns Trustwave SpiderLabs.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.