Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress
in the wild 8 min
New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems
in the wild 5 min1
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing
in the wild 3 min
New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems
in the wild 5 min1
Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM
in the wild 8 min
DeepZero: Open-source hunting for vulnerable Windows drivers
2 min
ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools
in the wild 7 min1
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
in the wild 8 min1
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
in the wild 5 min
Silver Fox Targets Japanese Manufacturer with 3
in the wild 4 min
GentleKiller targets more than 400 security processes across 48 products
in the wild 4 min1
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM
13 min2
BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
in the wild
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
3 min1