Cybersecurity researchers at Acronis Threat Research Unit (TRU) have uncovered a new campaign targeting individuals and organizations in Cambodia with an open-source…
CVE-2026-36425 is a vulnerability in the OPSWAT AppRemover driver (ardrv.sys) that is exploited via a bring your own vulnerable driver (BYOVD) technique…
OPSWAT is a cybersecurity company whose AppRemover product includes a driver (ardrv.sys) that is vulnerable to CVE-2026-36425. The driver is abused in…
OPSWAT AppRemover is a product that includes the vulnerable driver ardrv.sys (CVE-2026-36425). The driver is abused in a BYOVD attack to disable…
TrueSight is a driver that is referenced in the BYOVD routine of the Spark RAT campaign. It has also been used by…
Zemana Anti-Malware SDK is a driver that is referenced in the BYOVD routine of the Spark RAT campaign. It has also been…
The Chinese cybercrime group Silver Fox has been observed targeting a Japanese industrial manufacturing organization with a sophisticated attack chain that leverages…
GoFlyDrv.sys is a vulnerable driver abused by Cruciferra as part of bring-your-own-vulnerable-driver (BYOVD) attacks to terminate security processes on Windows systems.
The China-linked cybercrime group behind tax-themed phishing lures targeting Indian taxpayers and corporate finance teams has deployed a sophisticated crypter service called…
Cruciferra is a crypter service written in Mono, advertised on the cybercrime underground as the 'most lethal crypter' for $450 to $2,000…