Threatline

Results for “"file-encrypting malware"”

1–10 of 14 articles

Best match · title matches first

The Hacker News

8 months ago

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BYOVD) by abusing a total of 34 vulnerable drivers. EDR killer programs have been a common presence in ransomware intrusions as they offer a way for affiliates to neutralize security software before deploying file-encrypting malware. This

edr killers byovd

Threatline

Results for “"file-encrypting malware"”

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

Critical React2Shell flaw exploited in ransomware attacks

Interlock ransomware gang pushes fake IT tools in ClickFix attacks

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

You had a year to patch this Veeam flaw and now it's going to hurt

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

This sneaky ransomware gang keeps changing tactics to spread its malware

OldGremlin hackers use Linux ransomware to attack Russian orgs