Topic: velociraptor abuse

  • Ransomware Hackers Weaponize Velociraptor DFIR Tool

    Ransomware Hackers Weaponize Velociraptor DFIR Tool

    Malicious actors are misusing the Velociraptor digital forensics tool to deploy LockBit and Babuk ransomware, with the Chinese threat group Storm-2603 identified as responsible. Attackers exploited a privilege escalation vulnerability in Velociraptor to maintain persistent access, using technique...

    Read More »
  • Hackers Use SolarWinds Flaws to Deploy DFIR Tool in Attacks

    Hackers Use SolarWinds Flaws to Deploy DFIR Tool in Attacks

    Cybersecurity researchers have identified an active campaign exploiting critical vulnerabilities (CVE-2025-40551 and CVE-2025-26399) in SolarWinds Web Help Desk software to gain unauthorized access and deploy legitimate tools for malicious purposes. Attackers establish persistent control by insta...

    Read More »