NSecKrnl is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed February 9, 2026; most recent activity February 9, 2026.
The Black Basta ransomware gang has incorporated a bring-your-own-vulnerable-driver (BYOVD) defense evasion component within its ransomware payload. This technique, which typically involves separate tools to disable…