Threat Digest

Diagram illustrating a recursive directory loop created by NTFS junctions, with arrows pointing back to parent directories.

GhostTree: Windows Path Manipulation [New Exploit]

Ever wonder why that antivirus scan takes *forever*? Turns out, a clever trick with Windows file paths might be the culprit, letting attackers hide in plain sight. Welcome to GhostTree.

3 min read 4 days ago

Digital visualization of ransomware drivers dismantling EDR shields in a kernel battlefield

Ransomware & Malware

Qilin and Warlock's BYOVD Assault: Silencing 300+ EDRs in the Kernel

A sneaky DLL drops. Then, two rogue drivers rip through 300+ EDRs like tissue paper. Qilin and Warlock just redefined ransomware evasion.

4 min read 1 month, 2 weeks ago

#edr-bypass

GhostTree: Windows Path Manipulation [New Exploit]

Qilin and Warlock's BYOVD Assault: Silencing 300+ EDRs in the Kernel