/
ttps_attack:T1486 × criticity:high × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

Zscaler ThreatLabz: Ransomware Groups Use Generative AI for Phishing, Data Triage and Fast Exfiltration, Including Payouts King

Zscaler ThreatLabz's 2026 Ransomware Report describes ransomware operators using generative AI to sharpen phishing, speed up reconnaissance and pick out the most sensitive corporate data to steal. The report records 896.2 TB exfiltrated by the top 10 ransomware groups between April 2025 and March 2026. The article cites a 275.8% annual in…

gbhackers.com · high

Gentlemen ransomware uses vulnerable Lenovo and Safetica drivers (BYOVD) to kill security software before encryption

Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…