Security News New Avalon Malware Framework Packs CrownX Ransomware Capabilities TheHackerNews Daniel Bender 03 Jul 2026 Share Blackpoint says Avalon uses Proton Drive, ISO images, LNK files, and MSBuild to disable ETW, steal credentials, and deploy CrownX ransomware.