Killer Ultra exploits a vulnerability (CVE-2024-1853) in a legitimate driver (Zemana AntiLogger) to gain kernel-level permissions and terminate processes associated with common EDR and...
MirrorFace, a threat actor targeting media, political organizations, and academic institutions since 2022, has shifted focus to manufacturers and research institutions in 2023.
Initially relying...
The Void Banshee APT group exploited CVE-2024-38112, an MHTML RCE vulnerability, to execute malicious code through internet shortcuts and disabled Internet Explorer, delivering the...
BianLian, a prolific ransomware group, has rapidly expanded since its 2022 debut, employing sophisticated techniques and adapting to evolving threats. Exploiting RDP credentials, ProxyShell,...