08-09-2026
Nightmare Season: Nightmare-Eclipse Turns Its Zero-Days on CrowdStrike, NVIDIA, Avast, and Kaspersky
https://www.cyderes.com/howler-cell/nightmare-eclipse-zero-days-crowdstrike-nvidia-avast-kaspersky
Report completeness: Medium
Threats:
Nightmare_eclipse_tool
Bluehammer_tool
Shieldbreak_tool
Toctou_vuln
Pretty_prague
Hardbreacher
Passthehash_technique
Defendercontrol_tool
Dllsearchorder_hijacking_technique
Dll_hijacking_technique
Victims:
Endpoint security, Gpu drivers
TTPs:
Tactics: 2
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1003.002, T1012, T1053.005, T1059.001, T1068, T1105, T1106, T1134.001, T1134.002, T1134.004, have more...
IOCs:
File: 16
Domain: 2
Path: 3
Soft:
Microsoft Defender, BitLocker, Windows scheduled task, Microsoft Office, Windows service, Task Scheduler
Algorithms:
bcrypt, aes-128-cbc
Functions:
SandboxedMain, NtSetSecurityObject, CreateFileTransacted, PoC, OROpenHiveByHandle, LogonUserEx
Win API:
NtSetInformationFile, OpenFileMappingA, NtCreateDirectoryObject, ReadDirectoryChangesW, CreateTransaction, RollbackTransaction, NtCreateUserProcess, NtOpenSection, BCryptCloseAlgorithmProvider
Languages:
powershell
