Storm-2570 Uses Four Ransomware Brands—and the Same Access Tools
Microsoft links Storm-2570 to four ransomware families. Repeated remote access, credential theft…
CLOSEDQUORUM: Windows Malware Puts Its Next Move to a Vote
Talos found a Windows implant designed to take votes from four AI…
Diagnostic Policy Service High CPU: Find What Keeps It Busy
Trace Diagnostic Policy Service CPU spikes to their trigger. Check the host…
Service Host Network Service High Network Usage: Find the Download
Identify the service behind heavy Windows network traffic, separate downloads from peer…
State Repository Service High CPU: Find the App Behind It
Trace State Repository Service high CPU to an app, update or Windows…
PAYLOAD Turns Windows Group Policy Into a Ransom Demand
PAYLOAD attackers used domain policy to display ransom notes without encrypting Windows…
The Gentlemen Turn Stolen Backups Into a Source of Credentials
Talos traced backup images being opened for credential extraction and cloud transfer.…
AvastUI.exe Not Opening? Fix Application Errors Safely
AvastUI.exe will not open or shows an application error? Check protection status,…
MovieReaper Turns Movie Torrents Into Remote File Access
MovieReaper used a compromised torrent repository, a movie-named EXE and Solana address…
CHOSEN BRICK: Fake Support Moves Spyware to Personal PCs
A joint warning shows how CHOSEN BRICK operators move targets from work…
Music.exe: Is It a Virus? Check and Remove It Safely
Found Music.exe in Task Manager, startup, or on a USB drive? Identify…
HBO Max Reddit Ads Led to the PasteSwitch Malware Operation
A hijacked HBO Max Reddit account ran 108 malicious ads. Researchers followed…