[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TrendMicroRSRCH Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::11927342.png) Trend Micro Research [@TrendMicroRSRCH](/creator/twitter/TrendMicroRSRCH) on x 51.9K followers
Created: 2025-07-18 09:00:00 UTC

BERT ransomware disables Defender, firewall, and UAC using PowerShell before encryption even starts. Audit privileged PowerShell use and enforce script controls now. 

Find proactive defense strategies here:⬇️

![](https://pbs.twimg.com/card_img/1944730112446074880/_XmKs711?format=jpg&name=800x419)

XXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1946132836928331817/c:line.svg)

**Related Topics**
[stocks defense](/topic/stocks-defense)
[bert](/topic/bert)
[$4704t](/topic/$4704t)

[Post Link](https://x.com/TrendMicroRSRCH/status/1946132836928331817)