Tag: CVE-2025-7771

2 Attack Reports | 1 Vulnerabilities

Attack reports

Makop ransomware: GuLoader and privilege escalation in attacks against Indian businesses

Makop, a ransomware strain derived from Phobos, is targeting Indian businesses through exposed RDP systems. The attackers employ a diverse toolkit including network scanners, privilege escalation exploits, and AV killers. They have integrated GuLoader, a downloader trojan, to deliver secondary payl…
ransomware
guloader
privilege escalation
CVE-2020-0787
lazagne
credential dumping
network scanning
rdp exploitation
CVE-2025-7771
2025-12-09
CVE-2016-0099
CVE-2017-0213
CVE-2018-8639
CVE-2019-1388
CVE-2020-0796
CVE-2020-1066
CVE-2021-41379
CVE-2022-24521
makop
Published: December 9, 2025
Linked vulnerabilities : CVE-2020-0787, CVE-2025-7771 (CVSS 8.7), CVE-2016-0099, CVE-2020-1066, CVE-2018-8639, CVE-2020-0796, CVE-2019-1388, CVE-2021-41379, CVE-2022-24521, CVE-2017-0213
Downloadable IOCs: 62

ThrottleStop driver abused to terminate AV processes

A recent incident response case in Brazil revealed a new antivirus (AV) killer software circulating since October 2024. This malware abuses the ThrottleStop.sys driver to terminate numerous antivirus processes, employing a technique known as BYOVD (Bring Your Own Vulnerable Driver). The attack bega…
ransomware
byovd
medusalocker
kernel exploitation
2025-08-06
CVE-2025-7771
driver abuse
av killer
throttlestop
Published: August 6, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-7771

8.7
    Kaspersky
  • Throttlestop
Published: August 6, 2025
Click here to see more Vulnerabilities