CVE-2024-51324 2

Vulnerability (CVE)

New BYOVD loader behind Dead Lock ransomware attack

Cisco Talos observed a threat actor using a bring-your-own-vulnerable-driver technique with the legitimate Baidu Antivirus driver BdApiUtil.sys, renamed DriverGay.sys, to exploit CVE-2024-51324 and terminate security processes at the kernel level via IOCTL...

Threat Actors & Nation-State

One newsletter to rule them all

Cyber Risks Cisco Talos

Cisco Talos reported new tactics, techniques, and procedures tied to a financially motivated actor using DeadLock ransomware, which encrypts Windows files with a custom stream cipher that uses time-based cryptographic keys. The actor used the Bring Your...

Malware