Microsoft Adds Paragon Partition Manager Driver To Blocklist As Ransomware Hackers Exploit Windows-Signed Driver For Attacks

Quick Summary:

Ransomware operators have found a way to exploit a Microsoft Windows-signed driver from Paragon Partition Manager, posing a threat to system security.

What Happened: The Paragon Partition Manager uses a Microsoft Corp.(NASDAQ:MSFT) approved, digitally signed driver, BioNTdrv.sys, for storage partition management.

This allows attackers to deploy the driver with ransomware, leveraging its trusted status by the operating system.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Rounak Jain

Category: Technology

Markets: United States

Topics: News MSFT General Benzinga Consumer Tech Hacking US5949181045 Tech Ransomware

Source Website Secure: Yes (HTTPS)

News Sentiment: Negative

Fact Checked: Legitimate

Article Type: News Report

Published On: 2025-03-04 @ 12:36:29 (12 hours ago)

News Timezone: GMT +8:00

News Source URL: benzinga.com

Language: English

Article Length: 384 words

Reading Time: 3 minutes read

Sentences: 22 lines

Sentence Length: 18 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Benzinga

News ID: 26662722

View Article Analysis

About Benzinga

Main Topics: Technology

Official Website: benzinga.com

Update Frequency: 19 posts per day

Year Established: 2010

Headquarters: United States

News Last Updated: 8 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT +8:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #53

Publisher Details

Frequently Asked Questions