New SETTRA Ransomware Wipes Recovery Options Before Locking Windows Files
Security researchers have uncovered new details about Settra ransomware, a recently observed Windows threat that attempts to destroy recovery options before encrypting files.
Huntress...
MovieReaper Gives Hackers 21 Commands to Steal and Manipulate Files on Windows PCs
A newly identified malware framework named MovieReaper is spreading through malicious torrent downloads disguised as popular movies.
The modular Windows threat gives attackers 21...
Hackers Abuse Windows Shadow Copies to Steal Active Directory Credentials and Kill Ransomware Recovery
Windows Volume Shadow Copy Service, or VSS, is designed to create point-in-time copies of files and volumes. Administrators and backup products use it to...
Hackers Abuse Sliver, Mimikatz and Ethereum C2 in Windows Post-Exploitation Attack
A Windows post-exploitation toolkit linked to a ransomware investigation used reverse shells, credential theft utilities, service masquerading and Ethereum-based command-and-control infrastructure to maintain access...
New Windows Attack Hijacks Trusted Security Apps to Abuse Powerful Kernel Drivers
A new Windows attack technique called Bring Your Own Trusted Caller (BYOTC) shows how attackers can misuse trusted security applications to access powerful kernel...