Close Menu
World Forbes – Business, Tech, AI & Global Insights
  • Home
  • AI
  • Billionaires
  • Business
  • Cybersecurity
  • Education
    • Innovation
  • Money
  • Small Business
  • Sports
  • Trump
What's Hot

‘The Salt Path:’ A book that captured the hearts of millions, but now mired in controversy

July 11, 2025

Sebeiba festival in Algeria carries on ancient tradition

July 11, 2025

Photos of Cuban women with long decorated nails

July 11, 2025
Facebook X (Twitter) Instagram
Trending
  • ‘The Salt Path:’ A book that captured the hearts of millions, but now mired in controversy
  • Sebeiba festival in Algeria carries on ancient tradition
  • Photos of Cuban women with long decorated nails
  • Cuban women spend on extravagant nail art
  • Forbes 2025 America’s Most Successful Immigrants
  • Healthy workday snacks include a smart mix of energy-boosters
  • Americans see child care costs as ‘major problem,’ AP-NORC poll finds
  • Jane Birkin’s original Hermès bag is up for auction
World Forbes – Business, Tech, AI & Global InsightsWorld Forbes – Business, Tech, AI & Global Insights
Friday, July 11
  • Home
  • AI
  • Billionaires
  • Business
  • Cybersecurity
  • Education
    • Innovation
  • Money
  • Small Business
  • Sports
  • Trump
World Forbes – Business, Tech, AI & Global Insights
Home » Vulnerable Paragon Driver Exploited in Ransomware Attacks
Cybersecurity

Vulnerable Paragon Driver Exploited in Ransomware Attacks

adminBy adminMarch 3, 2025No Comments2 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr WhatsApp Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email
Post Views: 52


Ransomware operators have been observed deploying a vulnerable Paragon Hard Disk Manager driver in attacks and exploiting it to elevate their privileges to System.

The driver, Biontdrv.sys, which is part of Hard Disk Manager and other products that rely on it, such as Paragon Partition Manager and Backup and Recovery, contains five vulnerabilities that allow attackers to elevate privileges or cause a denial-of-service (DoS) condition.

“Additionally, as the attack involves a Microsoft-signed driver, an attacker can leverage a Bring Your Own Vulnerable Driver (BYOVD) technique to exploit systems even if Paragon Partition Manager is not installed,” a CERT/CC advisory reads.

The security defects include an arbitrary kernel memory bug (CVE-2025-0288), a null pointer dereference issue (CVE-2025-0287), an arbitrary kernel memory write flaw (CVE-2025-0286), an arbitrary kernel memory mapping bug (CVE-2025-0285), and an insecure kernel resource access vulnerability (CVE-2025-0289).

The flaws impact Biontdrv.sys versions 1.3.0 and 1.5.1 and were addressed with the release of version 2.0.0 of the driver. Paragon included the fixes in Hard Disk Manager version 17.45.0 and released a standalone security patch to resolve the bugs in older product versions based on Hard Disk Manager.

The patch, however, is only available for Windows 10, Windows 11, and Windows Server 2016, 2019, 2022, and 2025 devices, as older platform iterations are deemed unsafe.

According to CERT/CC, the exploitation of Biontdrv.sys in BYOVD attacks by ransomware groups was flagged by Microsoft, which last week added the vulnerable versions of the driver to its Vulnerable Driver Blocklist.

“After February 28, 2025 several features of Paragon Hard Disk Manager won’t be available if the fixed version of the BioNTdrv.sys driver is not installed,” Paragon warned last week.

Advertisement. Scroll to continue reading.

Organizations and end-users are advised to update all impacted Paragon applications – including Hard Disk Manager, Partition Manager, Backup and Recovery, Drive Copy, Disk Wiper, and Migrate OS to SSD – or to apply the available security patch as soon as possible.

Related: Watch Now: Ransomware Resilience & Recovery Summit – All Sessions Available on Demand

Related: New Anubis Ransomware Could Pose Major Threat to Organizations

Related: CISA, FBI Warn of China-Linked Ghost Ransomware Attacks

Related: Ransomware Payments Dropped to $813 Million in 2024



Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
admin
  • Website

Related Posts

O2 Service Vulnerability Exposed User Location

May 20, 2025

Madhu Gottumukkala Officially Announced as CISA Deputy Director

May 20, 2025

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software

May 19, 2025

Printer Company Procolored Served Infected Software for Months

May 19, 2025

UK Legal Aid Agency Finds Data Breach Following Cyberattack

May 19, 2025

480,000 Catholic Health Patients Impacted by Serviceaide Data Leak

May 19, 2025
Add A Comment
Leave A Reply Cancel Reply

Don't Miss
Billionaires

Forbes 2025 America’s Most Successful Immigrants

July 10, 2025

A record 125 foreign-born U.S. citizens are billionaires living in the United States. They hail…

Billionaire Immigrants From Iran, Cuba, Pakistan And Israel Discuss Current Climate

July 10, 2025

Mamdani Doesn’t Think We Should Have Billionaires. Here’s Why That Will Never Happen.

July 8, 2025

How The Blake Lively Saga Led A Billionaire To Shut Down His Foundation

July 7, 2025
Our Picks

‘The Salt Path:’ A book that captured the hearts of millions, but now mired in controversy

July 11, 2025

Sebeiba festival in Algeria carries on ancient tradition

July 11, 2025

Photos of Cuban women with long decorated nails

July 11, 2025

Cuban women spend on extravagant nail art

July 11, 2025

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

About Us
About Us

Welcome to World-Forbes.com
At World-Forbes.com, we bring you the latest insights, trends, and analysis across various industries, empowering our readers with valuable knowledge. Our platform is dedicated to covering a wide range of topics, including sports, small business, business, technology, AI, cybersecurity, and lifestyle.

Our Picks

After Klarna, Zoom’s CEO also uses an AI avatar on quarterly call

May 23, 2025

Anthropic CEO claims AI models hallucinate less than humans

May 22, 2025

Anthropic’s latest flagship AI sure seems to love using the ‘cyclone’ emoji

May 22, 2025

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

Facebook X (Twitter) Instagram Pinterest
  • Home
  • About Us
  • Advertise With Us
  • Contact Us
  • DMCA Policy
  • Privacy Policy
  • Terms & Conditions
© 2025 world-forbes. Designed by world-forbes.

Type above and press Enter to search. Press Esc to cancel.