Product
HWAuidoOs2Ec.sys
- First Reported
- Jun 16, 2026
- Latest Reported
- Jun 16, 2026
Reported Context (2)
- exploiting the Havoc Process Terminator, in which they use a custom technique to leverage Huawei’s HWAuidoOs2Ec.sys. DragonForce Uses Teams Relays and Backdoor.Turn in Attack on U.S. Services Firm
- The researchers also highlight the exploitation of Huawei’s HWAuidoOs2Ec.sys driver (“Havoc Process Terminator”), which is used for evasion in Bring Your Own Vulnerable Driver (BYOVD) tactics. DragonForce Used Microsoft Teams TURN Relays to Hide Backdoor C2 Traffic
CVE (3)
Malware (3)
People (1)
Threat Actors (2)
MITRE ATT&CK (14)
Vendors (6)
Products (9)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.