Cyber CrimeWarlock Hits SharePoint, Then Strikes
Symantec says the China-linked group behind Warlock ransomware disabled defenses on dozens of hosts within hours of exploiting SharePoint flaws.
> Search
5 results for “byovd”
Cyber Crime
Cyber CrimeSigned Driver, Dead AV: A Fake LastPass Trap
A counterfeit GitHub installer for LastPass Authenticator loads a Microsoft-signed kernel driver that kills security tools before stealing passwords.
Cyber CrimeSettra Ransomware Hits Retail and Manufacturing
Huntress details a new ransomware variant that sabotages recovery options and deploys BYOVD in retail and manufacturing attacks.
SecurityDefender's Boot Driver Becomes a Kernel Weapon
Researchers show how Windows' own BTR.sys can delete security software at boot, evading blocks.
Cyber CrimeRansomware’s Stealthy Ascent: Microsoft-Signed Driver Bypasses Defenses
GodDamn ransomware now exploits PoisonX, a Microsoft-signed kernel driver, to disable endpoint security, marking a critical escalation in evasion tactics.