⬇ Download holy card: ·
Saint MSC EvilTwin, of the Evil Twin
Patron of management consoles, files that look harmless, and doubles that pretend to be you.
Life
On 11 March 2025 Microsoft fixed CVE-2025-26633, later described by Trend Micro and attributed to the Water Gamayun group. The flaw was in how the Microsoft Management Console handled .msc files: with a malicious twin placed in the right spot, a security check was bypassed and code ran. It was already used in real attacks, and ended up in CISA's catalogue of exploited vulnerabilities.
Prayer
O Saint MSC EvilTwin, who puts an evil twin in the good one's place, teach our tools to recognise the real file. Amen.
How to celebrate
Celebrated by installing the March 2025 updates and distrusting .msc files that arrive from outside.
Where there's a good twin, someone plants an evil one.