// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-wedgDTG 0600Z
ColdRecon / Breach Radar / Baidu
Breach Record

Baidu

DISCLOSED 2026-10-14 · RANSOMWARE · RANSOMWARE

In December 2025, researchers documented DeadLock ransomware exploiting CVE-2024-51324 in the Baidu antivirus driver BdApiUtil to terminate EDR and Windows Defender. This BYOVD attack highlights the growing industry of using vulnerable signed drivers to disable endpoint security. The technique allows attackers to neutralize defenses before deploying ransomware.

The record

What we know

Disclosed
2026-10-14
Attack vector
Ransomware
RANSOMWARE
Sources

Cited reporting

↗ www.nsi-ca.com (2026-10-14)
Similar vector · recent

Other ransomware breaches on file

MoneyGram · 2026-10-16 supermarket chain (unnamed) · 2026-10-16 MoneyGram · 2026-10-15 KFC · 2026-10-15 supermarket chain (unnamed) · 2026-10-15 KFC · 2026-10-14 Advantest · 2026-10-14 Deloitte · 2026-10-14

This page is the permanent ColdRecon entry for the Baidu disclosure. It updates if new public reporting emerges. All tracked breaches →

Baidu just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →