#byovd
-
Warlock Keeps Exploiting SharePoint Flaws to Hit Critical Infrastructure
The suspected China-linked Warlock group continues to weaponize Microsoft SharePoint vulnerabilities, disable security tools, and deploy ransomware. Its recent victims span Portuguese- and Spanish-speaking countries.
-
Lunex Stealer Turns an AMD Driver Against the Very Tools Meant to Stop It
Ontinue has detailed the Lunex malware-as-a-service platform, whose Psychedelic stealer abuses a vulnerable AMD Radeon driver to blind security monitoring and harvest browser passwords.
-
Fake LastPass Installer Kills Antivirus With a Microsoft-Signed Driver
A bogus LastPass Authenticator page on GitHub served an installer that used a legitimately signed kernel driver to switch off security software before stealing passwords.