Tag: Microsoft Defender
One ransomware crew pivots between four brands with the same playbook
Microsoft says Storm-2570 swaps ransomware payloads but never swaps its tools, handing defenders a stable set of behaviors to hunt.
A disk-filling tool quietly stops Microsoft Defender updates
BigDiskBuster fills the system drive so Defender cannot install platform or signature updates, and there is no patch.
Chaotic Eclipse returns with a bypass for Defender’s ShieldBreak fix
A fresh proof of concept says Microsoft's fix for a Defender escalation bug leaves a gap.
Bogus download sites push implants that gut Windows Update and Defender
Microsoft ties counterfeit download sites to Silver Fox as implants disable Windows Update and carve out Defender exclusions.
Defender boot driver opens kernel file writes on all Windows versions
Check Point weaponizes Microsoft's signed BTR.sys driver to run kernel-level operations with no flaw exploited.
Microsoft shadows MacSync stealer as its domains keep rotating
Microsoft tracks 30-plus rotating domains tied to the MacSync stealer through behavioral pivots.
New Defender exploit defeats RoguePlanet patch, hands out SYSTEM shells
A researcher's ShieldBreak PoC claims to bypass Microsoft's fix for the Defender RoguePlanet flaw.
Two Actively Exploited Microsoft Defender Flaws Enable System Takeover
Two Microsoft Defender flaws are being exploited in the wild, allowing attackers to gain SYSTEM privileges or crash the antimalware…