In a recent investigation by Microsoft Incident Response of a BlackByte 2.0 ransomware attack, we found that the threat actor progressed through the full attack chain, from initial access to impact, in less than five days, causing significant business disruption for the victim organization.
A fresh exploration of the malware uncovers a new tactic for bypassing security products by abusing a known driver vulnerability
