MocoMsys

Reported Context (1)

fulfill this behavior. The driver, also known as, "DCRCVDrv.sys", is signed by South Korean IT company MocoMsys and exposes an IOCTL that allows user-mode applications to terminate processes directly from the kernel. ErrTraffic ClickFix Campaigns Use Cruciferra Loader to Disable Security Tools

Malware (4)

People (2)

Threat Actors (2)

MITRE ATT&CK (8)

Vendors (2)

Products (37)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.