[Stanley]

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver (BYOVD) component for defense evasion purposes within the ransomware payload itself.
BYOVD refers to an adversarial technique that abuses legitimate but flawed driver software to escalate privileges and disable Endpoint Detection

https://thehackernews.com/2026/02/reynol...river.html

[Moooookie]

Embedding a vulnerable driver like that is clever, seems like attackers keep finding new ways to slip past security tools.