
The recent activities of EncryptHub, a notorious threat actor, have sparked significant concerns among cybersecurity professionals as they exploit a zero-day vulnerability in Microsoft Windows to deploy a variety of malware. EncryptHub has been leveraging CVE-2025-26633, a critical vulnerability in Microsoft Management Console (MMC), to bypass local security features, maintain persistence, and steal sensitive data from compromised systems. This vulnerability,