New Avalon Malware Framework Packs CrownX Ransomware Capabilities
- Posted on July 3, 2026
- By The Hacker News
- 0 Views
- 1 min read
New Avalon Malware Framework Packs CrownX Ransomware Capabilities
Blackpoint says Avalon uses Proton Drive, ISO images, LNK files, and MSBuild to disable ETW, steal credentials, and deploy CrownX ransomware.