BullWall Ransomware Containment Hard-Coded Folder Exclusions Vulnerability

A vulnerability exists in BullWall Ransomware Containment due to hard-coded folder exclusions, such as '$recycle.bin', which are not monitored for suspicious activity. This oversight allows an attacker with file write permissions to evade detection by renaming a directory. The issue has been confirmed in versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4, but may also affect other versions.

Impact

Exploitation of this vulnerability could lead to undetected ransomware activity, allowing malicious files to be written and potentially executed without triggering any alarms.