1.Backgroud Recently, 360 Security Center discovered that a malicious driver “Netfilter rootkit” with WHQL signature was revealed in mid-June. WHQL signature means that after the…

On June 30, a security officer released a proof of concept for a Windows printer remote code execution vulnerability and named the vulnerability “PrintNightmare”. It…

In the security update in June this year, Microsoft fixed a long-standing Windows Print Spooler remote command execution vulnerability, the vulnerability number is CVE-2021-1675. By…

DarkSide Group Background DarkSide is an emerging RaaS (ransomware as a service) criminal group. The group may be organized by other former branches of ransomware…

In March 2021, 360 Security Center discovered an attack that disguised Telegram installation package. After the “installation package” is executed, the legitimate Telegram installation package…