Microsoft Adds Paragon Partition Manager Driver To Blocklist As Ransomware Hackers Exploit Windows-Signed Driver For Attacks
Ransomware operators have found a way to exploit a Microsoft Windows-signed driver from Paragon Partition Manager, posing a ...
Microsoft signed a dodgy driver and now ransomware scum are exploiting it
Paragon Software has released a new driver, BioNTdrv.sys version 2.0.0, which fixes these flaws. Vulnerable versions of the ...
cybernews1d
Update Paragon software now: Windows blocks vulnerable driver exploited by hackers
Security experts analyze how ransomware gangs exploit five zero-days in Paragon's signed driver to escalate privileges on ...
Microsoft discovers five potentially damaging attacks against its own software
Microsoft said four of the flaws affected Paragon Partition Manager versions 7.9.1 and older, with the fifth one (CVE-2025-0298) impacting version 17 and older - which was also the one apparently ...
SecurityWeek1d
Vulnerable Paragon Driver Exploited in Ransomware Attacks
Ransomware operators exploit a vulnerable Paragon driver in BYOVD attacks to elevate privileges to System. Ransomware operators have been observed deploying a vulnerable Paragon Hard Disk Manager ...
Microsoft-signed driver used in ransomware attacks
Threat actors are exploiting a privilege escalation flaw in Paragon Partition Manager for “bring your own vulnerable driver” ...
Security leak in Paragon Partition Manager driver is being abused
Attackers are abusing a leak in a Paragon Partition Manager driver. Particularly dangerous: they can bring it with them.
Infosecurity-magazine.com1d
BYOVD Attacks Exploit Zero-Day in Paragon Partition Manager
Threat actors are exploiting a zero-day bug in Paragon Partition Manager's BioNTdrv.sys driver during ransomware attacks ...
Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks
Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in ...
Bleeping Computer14d
Chinese hackers abuse Microsoft APP-v tool to evade antivirus
Update 2/18/25: Added ESET's statement to the end of the article. The Chinese APT hacking group "Mustang Panda" has been spotted abusing the Microsoft Application Virtualization Injector utility ...
TechCrunch26d
Paragon spyware used to target citizens across Europe, says Italian government
The Italian government said in a press release on Wednesday that a spyware campaign revealed by WhatsApp, and carried out with spyware made by Paragon Solutions, targeted people across several ...