{"uuid": "2de70267-6f80-41b6-84a6-e3f0afa68c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "exploited", "source": "https://t.me/pphm_HackerNews/831", "content": "Unmasking the Digital Menace: The Evolution of a Stealthy Ransomware Threat\n\nPipeMagic is a sophisticated malware framework that has gained notoriety for its ability to masquerade as legitimate software, specifically a ChatGPT Desktop Application. This backdoor malware, attributed to the threat actor group Storm-2460, exploits vulnerabilities in the Windows Common Log File System (CLFS), particularly the zero-day vulnerability CVE-2025-29824. Initially observed in 2022, PipeMagic has expanded its operations from targeting entities in Asia to a broader range of sectors across the globe, including the Middle East, North and South America, and Europe.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:24.916157Z"}