Cyber Creatures

I published my write up on blog

Link in my bio.

GhostRedirector: 65+ Windows Servers Compromised to Run SEO-Fraud IIS Malware

https://cybercreatures.blogspot.com/2025/09/ghostredirector-65-windows-servers.html

Special thanks to

I published my write up on blog

Link in my bio.

Hackers use DNS tunneling for network scanning, tracking victims

https://lnkd.in/dqipRHKg

Special thanks to

I published my write up on blog

Link in my bio.

C**t Telecom Hit by WarLock Ransomware: SharePoint Zero Day Used for Mass Data Theft

https://cybercreatures.blogspot.com/2025/08/colt-telecom-hit-by-warlock-ransomware.html

Special thanks to

I published my write up on blog

Link in my bio.

Critical Windows Zero-Day Vulnerability Lets Attackers Steal Users NTLM Credentials

https://cybercreatures.blogspot.com/2025/03/critical-windows-zero-day-vulnerability.html

Special thanks to

I published my write up on blog

Link in my bio.

Hackers Can Abuse Active Directory Certificate Services to Establish Persistence

https://cybercreatures.blogspot.com/2025/03/hackers-can-abuse-active-directory.html

Special thanks to

I published my write up on blog

Link in my bio.

Active Directory Ransomware Attacks

https://cybercreatures.blogspot.com/2025/03/active-directory-ransomware-attacks.html?m=1

Special thanks to

I published my write up on blog.
Link in my bio.

Hacktivist Group Exploit WinRAR Vulnerability to Encrypt Windows & Linux

https://cybercreatures.blogspot.com/2024/09/hacktivist-group-exploit-winrar.html

Special thanks to

I published my write up on blog.
Link in my bio.

CrowdStrike Update Crisis: Impact, Causes, and Prevention

https://cybercreatures.blogspot.com/2024/07/crowdstrike-update-crisis-impact-causes.html

Special thanks to

🚨A URGENT SHARE SOMEONE NEED IT🚨

A widespread Windows outage is not what businesses need on a Friday afternoon. The screenshot below (from SMH) shows the cause of the issue in tiny text - a device driver called csagent.sys. Here's how to fix it, according to a reliable source:

1. Restart Windows and boot into Troubleshooting mode

2. Open a command prompt

3. Go to C:\Windows\System32\drivers\CrowdStrike

4. Locate the file matching "C-00000291* sys", and delete it.

[was: Rename the file CSAgent.sys to something else, eg. donotcrash.sys]

5. Continue normal startup

I published my write up on blog.
Link in my bio.

Black Basta Ransomware Attack Brought Down Ascension IT Systems: Report

https://cybercreatures.blogspot.com/2024/06/black-basta-ransomware-attack-brought.html

Special thanks to

I published my write up on blog.
Link in my bio.

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

https://cybercreatures.blogspot.com/2024/05/qemu-emulator-exploited-as-tunneling.html

Special thanks to

I published my write up on blog.
Link in my bio.

BlueDucky: A New Tool Exploits Bluetooth Vulnerability With 0-Click Code Ex*****on

https://cybercreatures.blogspot.com/2024/05/blueducky-new-tool-exploits-bluetooth.html

Special thanks to