{"uuid": "e686768f-83a7-4245-ae50-5e1cbcb44d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/pphm_HackerNews/831", "content": "Unmasking the Digital Menace: The Evolution of a Stealthy Ransomware Threat\n\nPipeMagic is a sophisticated malware framework that has gained notoriety for its ability to masquerade as legitimate software, specifically a ChatGPT Desktop Application. This backdoor malware, attributed to the threat actor group Storm-2460, exploits vulnerabilities in the Windows Common Log File System (CLFS), particularly the zero-day vulnerability CVE-2025-29824. Initially observed in 2022, PipeMagic has expanded its operations from targeting entities in Asia to a broader range of sectors across the globe, including the Middle East, North and South America, and Europe.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.173522Z"}