burntcigar – PossibleThreat Articles

Security Sophos

L’aggiornamento di uno strumento di attacco compromette i computer Windows

October 1, 2024 0 Comments blackcat, burntcigar, cuba, EDR, edr killer, featured, kernel driver, leaked certificate, lockbit, medusa, poortry, ransomhub, Ransomware, signature, signed driver, stonestop, threat research

Credit to Author: Giusy Martin| Date: Tue, 10 Sep 2024 06:29:56 +0000

Un EDR killer che Sophos X-Ops ha monitorato per tre anni continua a tormentare le organizzazioni prese di mira dalle bande di ransomware

Security Sophos

Attack tool update impairs Windows computers

August 27, 2024 0 Comments blackcat, burntcigar, cuba, edr killer, featured, kernel driver, leaked certificate, lockbit, medusa, poortry, ransomhub, Ransomware, signature, signed driver, stonestop, threat research

Credit to Author: Andrew Brandt| Date: Tue, 27 Aug 2024 16:33:35 +0000

An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.

Security Sophos

Signed driver malware moves up the software trust chain

December 13, 2022 0 Comments 2022-12, adv220005, burntcigar, byovd, cuba ransomware, driver signature enforcement, drivers, featured, Patch Tuesday, sbom, security operations, signed drivers, sophos x-ops, supply chain compromise, threat research, whcp, whql, Windows, x-ops

Credit to Author: Andrew Brandt| Date: Tue, 13 Dec 2022 18:00:15 +0000

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate