New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Back Thehackernews

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Thehackernews • July 4, 2026

Share: View original

Learn how to secure AI agents with practical controls for access, visibility, secrets, and risk containment.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Avalon Malware Framework Delivers CrownX Ransomware via Legal Document Lure A new malware framework named Avalon has been discovered, utilizing a spoofed legal document to deliver a ransomware component known as CrownX. This previously undocumented malware employs a multi-stage, fileless attack vector, indicating a trend towards integrating various offensive capabilities into a single payload. The campaign highlights the potential use of AI in its development, reflecting modern malware creation practices. The specific targets and scale of the attack remain unclear, but the sophistication of the method suggests a significant threat to organizations that may fall victim to this tactic. Security professionals are advised to remain vigilant and enhance their defenses against such evolving threats. 3 sources 49

Extracted Entities

Attack Types (1)

Ransomware Groups (1)

Tools (1)

Avalon Malware Framework