/
ttps_attack:T1053.005 × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

UNC7017 hijacks AOMEI update infrastructure to deliver CROSSROAD downloader and SHINYROAD backdoor

A supply chain campaign tracked as UNC7017 hijacked the update infrastructure of AOMEI Technology between April and July 2026 to distribute the CROSSROAD downloader and the SHINYROAD backdoor through AOMEI Backupper and AnyViewer update workflows. The attackers tampered with server configurations only briefly, then restored legitimate con…

UNC7017 it services telecommunications
gbhackers.com · high

Gentlemen ransomware uses vulnerable Lenovo and Safetica drivers (BYOVD) to kill security software before encryption

Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…

CVE-2025-70795 Gentlemen ArmCorp manufacturing technology