Skip to content
Threat Feed
Subscribe

Actor

BlackByte

2 briefs RSS
medium threat

Detection of Windows Registry Modification for LongPathsEnabled

Adversaries, including the BlackByte ransomware group, modify the 'LongPathsEnabled' registry key to bypass Windows 260-character file path limitations, enabling the concealment and execution of malicious payloads.

Windows BlackByte defense-evasion registry-modification persistence
1r 1t
medium threat

Windows EnableLinkedConnections Registry Modification

Detection of unauthorized modifications to the EnableLinkedConnections registry key, a technique used by BlackByte ransomware to enable cross-privilege network share access.

Windows BlackByte defense-evasion registry ransomware
1r 1t