Windows Defender exploited by LockBit ransomware

Sentinel Labs researchers discovered that threat actors affiliated with the LockBit 3.0 ransomware operation have installed Cobalt Strike beacons on compromised systems through the exploitation of the Windows Defender command line tool "MpCmdRun.exe", BleepingComputer reports.

cybercrime defender lockbit lockbit ransomware malware ransomware windows windows defender