vortexcry-organization/vortexcry-ransomware-releaseAdvanced ransomware using process injection and kernel driver loading via CVE-2019-16098 to encrypt files, disable recovery, and demand ransom. For research only.
VortexCry is an advanced ransomware that utilizes multi-stage process injection (such as Process Hollowing and APC Injection) and kernel driver loading (via the CVE-2019-16098 vulnerability). It is capable of encrypting files, destroying system recovery functionalities, and demanding a ransom. VortexCry Ransomware are provided exclusively for technical sharing and academic research purposes. Any form of dissemination, replication, or misuse of this content for malicious activities is strictly prohibited. Users must comply with applicable laws and ethical standards to ensure responsible handling of the information.
