#pipemagic — Public Fediverse posts

🚨 Microsoft dissects PipeMagic — modular backdoor disguised as ChatGPT desktop app.
🔹 Linked to Storm-2460 / RansomEXX ransomware
🔹 Exploits Windows 0-day (CVE-2025-29824)
🔹 Modular + stealthy, memory-resident design
🔹 Targets orgs in US, EU, S. America, Middle East

#Infosec #Ransomware #ZeroDay #PipeMagic

🚨 Microsoft dissects PipeMagic — modular backdoor disguised as ChatGPT desktop app.
🔹 Linked to Storm-2460 / RansomEXX ransomware
🔹 Exploits Windows 0-day (CVE-2025-29824)
🔹 Modular + stealthy, memory-resident design
🔹 Targets orgs in US, EU, S. America, Middle East

#Infosec #Ransomware #ZeroDay #PipeMagic

PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain – Source: www.darkreading.com https://ciso2ciso.com/pipemagic-backdoor-resurfaces-as-part-of-play-ransomware-attack-chain-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #PipeMagic

PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain – Source: www.darkreading.com https://ciso2ciso.com/pipemagic-backdoor-resurfaces-as-part-of-play-ransomware-attack-chain-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #PipeMagic

PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain – Source: www.darkreading.com https://ciso2ciso.com/pipemagic-backdoor-resurfaces-as-part-of-play-ransomware-attack-chain-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #PipeMagic

PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain – Source: www.darkreading.com https://ciso2ciso.com/pipemagic-backdoor-resurfaces-as-part-of-play-ransomware-attack-chain-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #PipeMagic

Analyzing evolution of the PipeMagic malware – Source: securityaffairs.com https://ciso2ciso.com/analyzing-evolution-of-the-pipemagic-malware-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #PipeMagicmalware #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #PipeMagic #hacking #Malware

Analyzing evolution of the PipeMagic malware – Source: securityaffairs.com https://ciso2ciso.com/analyzing-evolution-of-the-pipemagic-malware-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #PipeMagicmalware #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #PipeMagic #hacking #Malware

Analyzing evolution of the PipeMagic malware – Source: securityaffairs.com https://ciso2ciso.com/analyzing-evolution-of-the-pipemagic-malware-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #PipeMagicmalware #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #PipeMagic #hacking #Malware

Analyzing evolution of the PipeMagic malware – Source: securityaffairs.com https://ciso2ciso.com/analyzing-evolution-of-the-pipemagic-malware-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #PipeMagicmalware #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #PipeMagic #hacking #Malware

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
#PipeMagic #Storm_2460 #CVE_2025_29824
https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
#PipeMagic #Storm_2460 #CVE_2025_29824
https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
#PipeMagic #Storm_2460 #CVE_2025_29824
https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
#PipeMagic #Storm_2460 #CVE_2025_29824
https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
#PipeMagic #Storm_2460 #CVE_2025_29824
https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Microsoft Dissects PipeMagic Modular Backdoor https://www.securityweek.com/microsoft-dissects-pipemagic-modular-backdoor/ #Malware&Threats #PipeMagic #backdoor #malware

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft – Source:hackread.com https://ciso2ciso.com/fake-chatgpt-desktop-app-delivering-pipemagic-backdoor-microsoft-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #backdoor #Hackread #security #Chatgpt #malware #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft – Source:hackread.com https://ciso2ciso.com/fake-chatgpt-desktop-app-delivering-pipemagic-backdoor-microsoft-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #backdoor #Hackread #security #Chatgpt #malware #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft – Source:hackread.com https://ciso2ciso.com/fake-chatgpt-desktop-app-delivering-pipemagic-backdoor-microsoft-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #backdoor #Hackread #security #Chatgpt #malware #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft – Source:hackread.com https://ciso2ciso.com/fake-chatgpt-desktop-app-delivering-pipemagic-backdoor-microsoft-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #backdoor #Hackread #security #Chatgpt #malware #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft https://hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/ #Cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #Security #backdoor #Malware #ChatGPT #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft https://hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/ #Cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #Security #backdoor #Malware #ChatGPT #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft https://hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/ #Cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #Security #backdoor #Malware #ChatGPT #GitHub

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft https://hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/ #Cybersecurity #Vulnerability #CyberAttack #WindowsCLFS #Microsoft #PipeMagic #Storm2460 #Security #backdoor #Malware #ChatGPT #GitHub

NEW 🚨 Microsoft warns hackers used a fake ChatGPT desktop app to deliver the PipeMagic backdoor, linked to ransomware attacks exploiting a #Windows zero-day.

🔗 hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/

#CyberSecurity #Microsoft #ChatGPT #PipeMagic #Malware

NEW 🚨 Microsoft warns hackers used a fake ChatGPT desktop app to deliver the PipeMagic backdoor, linked to ransomware attacks exploiting a #Windows zero-day.

🔗 hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/

#CyberSecurity #Microsoft #ChatGPT #PipeMagic #Malware

NEW 🚨 Microsoft warns hackers used a fake ChatGPT desktop app to deliver the PipeMagic backdoor, linked to ransomware attacks exploiting a #Windows zero-day.

🔗 hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/

#CyberSecurity #Microsoft #ChatGPT #PipeMagic #Malware

NEW 🚨 Microsoft warns hackers used a fake ChatGPT desktop app to deliver the PipeMagic backdoor, linked to ransomware attacks exploiting a #Windows zero-day.

🔗 hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/

#CyberSecurity #Microsoft #ChatGPT #PipeMagic #Malware

NEW 🚨 Microsoft warns hackers used a fake ChatGPT desktop app to deliver the PipeMagic backdoor, linked to ransomware attacks exploiting a #Windows zero-day.

🔗 hackread.com/fake-chatgpt-desktop-app-pipemagic-backdoor-microsoft/

#CyberSecurity #Microsoft #ChatGPT #PipeMagic #Malware

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
#CVE_2025_29824 #PipeMagic
https://securelist.com/pipemagic/117270/

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
#CVE_2025_29824 #PipeMagic
https://securelist.com/pipemagic/117270/

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
#CVE_2025_29824 #PipeMagic
https://securelist.com/pipemagic/117270/

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
#CVE_2025_29824 #PipeMagic
https://securelist.com/pipemagic/117270/

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
#CVE_2025_29824 #PipeMagic
https://securelist.com/pipemagic/117270/

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware – Source:thehackernews.com https://ciso2ciso.com/pipemagic-trojan-exploits-windows-zero-day-vulnerability-to-deploy-ransomware-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #PipeMagic

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware – Source:thehackernews.com https://ciso2ciso.com/pipemagic-trojan-exploits-windows-zero-day-vulnerability-to-deploy-ransomware-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #PipeMagic

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware – Source:thehackernews.com https://ciso2ciso.com/pipemagic-trojan-exploits-windows-zero-day-vulnerability-to-deploy-ransomware-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #PipeMagic

#Windows #UnderAttack: #0day #vulnerability used by #ransomware group

https://www.ghacks.net/2025/04/09/windows-under-attack-0-day-vulnerability-used-by-ransomware-group/?utm_source=mas.to&utm_medium=social&utm_campaign=&utm_term=&utm_content=&utm_referrer=https%3A%2F%2Fmas.to%2F%40KNTRO&utm_id=&utm_creative=&utm_channel=mastodon_organic&utm_platform=desktop&utm_location=argentina&utm_language=es-ar&utm_variant=

#0DayVulnerability #ZeroDay #ZeroDayVulnerability #Windows10 #Windows11 #WindowsServer #WindowsServer2025 #CVE202529824 #CVE_2025_29824 #CommonLogFileSystem #CLFS #Storm2460 #Storm_2460 #RansomEXX #MSBuild #PipeMagic #LSASS #LSASSMemory

#Windows #UnderAttack: #0day #vulnerability used by #ransomware group

https://www.ghacks.net/2025/04/09/windows-under-attack-0-day-vulnerability-used-by-ransomware-group/?utm_source=mas.to&utm_medium=social&utm_campaign=&utm_term=&utm_content=&utm_referrer=https%3A%2F%2Fmas.to%2F%40KNTRO&utm_id=&utm_creative=&utm_channel=mastodon_organic&utm_platform=desktop&utm_location=argentina&utm_language=es-ar&utm_variant=

#0DayVulnerability #ZeroDay #ZeroDayVulnerability #Windows10 #Windows11 #WindowsServer #WindowsServer2025 #CVE202529824 #CVE_2025_29824 #CommonLogFileSystem #CLFS #Storm2460 #Storm_2460 #RansomEXX #MSBuild #PipeMagic #LSASS #LSASSMemory

#Windows #UnderAttack: #0day #vulnerability used by #ransomware group

https://www.ghacks.net/2025/04/09/windows-under-attack-0-day-vulnerability-used-by-ransomware-group/?utm_source=mas.to&utm_medium=social&utm_campaign=&utm_term=&utm_content=&utm_referrer=https%3A%2F%2Fmas.to%2F%40KNTRO&utm_id=&utm_creative=&utm_channel=mastodon_organic&utm_platform=desktop&utm_location=argentina&utm_language=es-ar&utm_variant=

#0DayVulnerability #ZeroDay #ZeroDayVulnerability #Windows10 #Windows11 #WindowsServer #WindowsServer2025 #CVE202529824 #CVE_2025_29824 #CommonLogFileSystem #CLFS #Storm2460 #Storm_2460 #RansomEXX #MSBuild #PipeMagic #LSASS #LSASSMemory

#Windows #UnderAttack: #0day #vulnerability used by #ransomware group

https://www.ghacks.net/2025/04/09/windows-under-attack-0-day-vulnerability-used-by-ransomware-group/?utm_source=mas.to&utm_medium=social&utm_campaign=&utm_term=&utm_content=&utm_referrer=https%3A%2F%2Fmas.to%2F%40KNTRO&utm_id=&utm_creative=&utm_channel=mastodon_organic&utm_platform=desktop&utm_location=argentina&utm_language=es-ar&utm_variant=

#0DayVulnerability #ZeroDay #ZeroDayVulnerability #Windows10 #Windows11 #WindowsServer #WindowsServer2025 #CVE202529824 #CVE_2025_29824 #CommonLogFileSystem #CLFS #Storm2460 #Storm_2460 #RansomEXX #MSBuild #PipeMagic #LSASS #LSASSMemory

Happy Wednesday everyone!

Today's #readoftheday starts strong! "Microsoft Threat Intelligence and Microsoft Security Response Center (MSRC) have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) against a small number of targets." and their discovery involved #PipeMagic malware which was used to deploy ransomware. Enjoy and Happy Hunting!

Exploitation of CLFS zero-day leads to ransomware activity
https://www.microsoft.com/en-us/security/blog/2025/04/08/exploitation-of-clfs-zero-day-leads-to-ransomware-activity/

Intel 471 Cyborg Security, Now Part of Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting

Happy Wednesday everyone!

Today's #readoftheday starts strong! "Microsoft Threat Intelligence and Microsoft Security Response Center (MSRC) have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) against a small number of targets." and their discovery involved #PipeMagic malware which was used to deploy ransomware. Enjoy and Happy Hunting!

Exploitation of CLFS zero-day leads to ransomware activity
https://www.microsoft.com/en-us/security/blog/2025/04/08/exploitation-of-clfs-zero-day-leads-to-ransomware-activity/

Intel 471 Cyborg Security, Now Part of Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting

Happy Wednesday everyone!

Today's #readoftheday starts strong! "Microsoft Threat Intelligence and Microsoft Security Response Center (MSRC) have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) against a small number of targets." and their discovery involved #PipeMagic malware which was used to deploy ransomware. Enjoy and Happy Hunting!

Exploitation of CLFS zero-day leads to ransomware activity
https://www.microsoft.com/en-us/security/blog/2025/04/08/exploitation-of-clfs-zero-day-leads-to-ransomware-activity/

Intel 471 Cyborg Security, Now Part of Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting

Happy Wednesday everyone!

Today's #readoftheday starts strong! "Microsoft Threat Intelligence and Microsoft Security Response Center (MSRC) have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) against a small number of targets." and their discovery involved #PipeMagic malware which was used to deploy ransomware. Enjoy and Happy Hunting!

Exploitation of CLFS zero-day leads to ransomware activity
https://www.microsoft.com/en-us/security/blog/2025/04/08/exploitation-of-clfs-zero-day-leads-to-ransomware-activity/

Intel 471 Cyborg Security, Now Part of Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting