Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks
Threat actors linked to Storm-2603, also known as CL-CRI-1040 or Gold Salem, abused the open-source DFIR tool Velociraptor in ransomware attacks, delivering an outdated version 0.73.4.0 vulnerable to CVE-2025-6264 to enable arbitrary command execution and...