#byovd

The Warlock group combines SharePoint exploits, DLL sideloading, and custom BYOVD malware to breach networks, exfiltrate data, and deploy ransomware at scale.

Source: Trend Micro

Reynolds ransomware now embeds a vulnerable NSecKrnl driver to shut down antivirus and EDR tools, encrypting files with a .locked extension and evading detection.

Source: Security.com

Investigadores de Symantec y Carbon Black descubrieron Backdoor.Turn, el primer malware conocido que abusa de la infraestructura de relevo TURN de Microsoft Teams para camuflar su comunicación de comando y control como tráfico legítimo, en un ataque a una empresa de servicios de EE.UU. (Fuente Securityweek). El grupo de ransomware DragonForce volvió a sorprender a la comunidad de ciberseguridad…

A ransomware-as-a-service group called The Gentlemen targets organisations with FortiGate CVE-2024-55591, spreading malware across thousands of compromised devices and VPNs.

Source: Group-IB

Nearly 90 active EDR killer variants are deployed in ransomware attacks, disabling endpoint protection using vulnerable drivers or driverless techniques before encrypting systems.

Source: ESET

Read the full report on -