CVE-2024-51324

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

December 9, 2025

Last Seen

October 13, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

DeadLock Ransomware Employs BYOVD Technique to Bypass Security50.2

DeadLock ransomware is being deployed by a financially motivated threat actor using a new loader that utilizes the Bring Your Own Vulnerable Driver (BYOVD) technique. This method disables endpoint detection and response (EDR) processes by exploiting a known vulnerability in a legitimate Baidu Antivi...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

DeadLock Ransomware Employs BYOVD Technique to Bypass Security

Dec 10·3 sources

Related Articles (4)

Ironchain Analysis

any.run·Oct 13

BYOVD enhances DeadLock ransomware's stealth

Scworld·Dec 11

DeadLock Ransomware Uses New BYOVD Loader to Disable EDR

Technadu·Dec 10

DeadLock Ransomware Uses BYOVD to Evade Security Measures

Infosecurity-Magazine·Dec 9

Related Entities

Ransomware Bring Your Own Vulnerable Driver CVE-2025-70795 DeadLock Derp IronChain RansomLook T1490 - Inhibit System Recovery T1059.001 - PowerShell T1055.012 - Process Hollowing T1068 - Exploitation for Privilege Escalation T1112 - Modify Registry