Tag: CVE-2024-51324

2 Attack Reports | 1 Vulnerabilities

Attack reports

New BYOVD loader behind DeadLock ransomware attack

A new loader exploiting a Baidu Antivirus driver vulnerability (CVE-2024-51324) has been discovered in connection with DeadLock ransomware attacks. The threat actor uses the Bring Your Own Vulnerable Driver (BYOVD) technique to terminate endpoint detection and response processes. A PowerShell scrip…
ransomware
edr evasion
byovd
CVE-2024-51324
2025-12-10
deadlock
Published: December 10, 2025
Linked vulnerabilities : CVE-2024-51324 (CVSS 3.8)
Downloadable IOCs: 5

Warlock operation joins busy ransomware landscape

GOLD SALEM, also known as Warlock Group, has emerged as a significant player in the ransomware landscape since March 2025. The group has compromised networks across North America, Europe, and South America, targeting a range of organizations from small entities to large corporations. GOLD SALEM ope…
ransomware
credential theft
lateral movement
CVE-2024-51324
CVE-2025-53770
CVE-2025-53771
CVE-2025-49704
CVE-2025-49706
warlock
dedicated leak site
2025-09-17
edr bypass
sharepoint exploitation
warlock group
Published: September 17, 2025
Linked vulnerabilities : CVE-2024-51324 (CVSS 3.8), CVE-2025-53770 (CVSS 9.8), CVE-2025-53771 (CVSS 7.1), CVE-2025-49704, CVE-2025-49706
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-51324

3.8
    Baidu Antivirus
Published: February 11, 2025
Click here to see more Vulnerabilities