Excerpt
Dragoncore_k.sys & Zhengzhou 403 Network Technology Co., Ltd.
0-Day BYOVD Vulnerability | Shell Company Analysis | Dragon Breath APT-Q-27 | APT31 Personnel Nexus Field Value
Report Date April 22, 2026
Authors Alex Necula, Ellis Stannard
TLP Classification TLP:WHITE — Unrestricted Distribution
Subject Driver dragoncore_k.sys
Vulnerability Class 0-Day / BYOVD — PPL Bypass / EDR Ne…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ransom-isac.com on ransom-isac.com.
Mentioned in the excerpt
On the same topics
- ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoftMandiant (Google) · Published 25 Sep
- TA488 Targets Zimbra Mailservers with Half-Click ExploitsProofpoint · Published 15 Jul
- Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukrainebluecyber.hashnode.dev · Published 22 Jul
- Iranian APT group ‘MuddyWater’ Adds Exploits to Their ArsenalClearSky · Published 6 Jun 2019
