[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHEgE_r1JZjQBhFxB8EpIJQUrdyvkd5zZ0rih9AvBIN0":3},{"article":4,"iocs":29,"watch_terms":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"154a2e61-4169-4952-9320-5ddb962b8cda","‼️ A Windows Ring-0\u002FKernel Micro-Implant is being sold on a popular cybercrime forum.\n\nThreat Act...","a-windows-ring-0-kernel-micro-implant-is-being-sold-on-a-popular-cybercrime-foru","‼️ A Windows Ring-0\u002FKernel Micro-Implant is being sold on a popular cybercrime forum.\n\nThreat Actor: coree\nCategory: Malware \u002F Implant\n\nThe threat actor is selling a kernel-level implant targeting Windows 10 x64 (1507-22H2) and Windows 11 x64 (21H2-24H2). The implant communicates https:\u002F\u002Ft.co\u002FkeirtofNIM","A threat actor using the handle 'coree' is marketing a Windows Ring-0\u002Fkernel-level micro-implant on a popular cybercrime forum, targeting Windows 10 and 11 across multiple build versions. The implant operates at kernel privilege level, enabling deep system compromise. Distribution and pricing details remain incomplete in available information.","Windows kernel-level micro-implant offered for sale on cybercrime forum by threat actor coree.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2039428002312826945","2026-04-01T19:41:41+00:00","2026-04-01T20:00:20.962315+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":11,"name":19,"slug":20},"Malware","malware",[22,24],{"category":23},{"id":17,"icon":11,"name":19,"slug":20},{"category":25},{"id":26,"icon":11,"name":27,"slug":28},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[30,33],{"type":20,"value":31,"context":32},"Windows Ring-0\u002FKernel Micro-Implant","Kernel-level implant sold by threat actor coree targeting Windows 10 x64 (1507-22H2) and Windows 11 x64 (21H2-24H2)",{"type":20,"value":34,"context":35},"coree","Threat actor username selling the kernel implant on cybercrime forum",[]]