#byovd

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

Jul 30, 2026 // 13:40

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting […]

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

Jul 27, 2026 // 14:00

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using […]

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Jul 2, 2026 // 22:26

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ […]

Making Vulnerable Drivers Exploitable Without Hardware – The BYOVD Perspective

May 22, 2026 // 14:48

This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were […]

BYOVD Used to Disable Security: 54 EDR Killers Exploit 35 Vulnerable, Signed Drivers.

Mar 20, 2026 // 11:14

A fresh examination of programs designed to disable endpoint detection and response (EDR) solutions has found that 54 of them exploit a “bring your own […]

New XMRig Malware Campaign Combines BYOVD Exploitation with a Hardcoded Time Bomb for Stealthy Mining

Feb 23, 2026 // 21:20

A sophisticated cryptojacking campaign is deploying a custom XMRig miner using advanced techniques to ensure both high infection rates and stealthy persistence. According to a Trellix technical report, […]