54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security A new analysis found 54 EDR killers abusing 34 vulnerable drivers via the bring your own vulnerable driver (BYOVD) technique to gain kernel privileges and disable endpoint protections before encryption. These tools are developed by closed ransomware groups, proof-of-concept forkers, and marketplace sellers and include examples such as DemoKiller, EDRSilencer, and...

54 EDR killers exploit 34 signed vulnerable drivers using BYOVD to gain kernel privileges and disable endpoint protections before encryption. Tools come from ransomware groups, POC forkers, and marketplace sellers. #KernelExploitation #EDRKiller

New ‘BlackSanta’ EDR killer spotted targeting HR departments Windows shortcut (.LNK) masquerading as a PDF file read more about New ‘BlackSanta’ EDR killer spotted targeting HR departments

New ‘BlackSanta’ EDR killer spotted targeting HR departments reconbee.com/new-blacksan...

#blacksanta #EDRkiller #HR #cybersecurity #cyberattack

EDR killer tool uses signed kernel driver from forensic software Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate them.

#EDRkiller tool uses signed #kernel driver from forensic software

www.bleepingcomputer.com/news/security/edr-killer...

#EnCase #cybersecurity #EDR #DigitalForensics

Shanya EDR Killer: A new tool empowering ransomware groups by disabling security defenses. Stay vigilant and enhance your cybersecurity measures. #CyberSecurity #Ransomware #EDRKiller Link: thedailytechfeed.com/new-ransomwa...

Un EDR Killer partagé entre groupes de ransomware Sophos révèle qu’un outil malveillant partagé, « EDR Killer », désactive les antivirus pour plusieurs groupes ransomware. Un tournant dans l’économie du cybercrime organisé.

// Un EDR Killer entre les mains des cybercriminels

Un outil furtif désarme les antivirus, contourne les EDR et circule entre groupes de ransomware. Sophos alerte : la menace devient coopérative.

➡️ www.datasecuritybreach.fr/un-edr-kille...

#cybersécurité #ransomware #EDRkiller #zataz

EDR-Killer - So lässt sich eine Endpoint-Detection-and-Response-Lösung selber schützen

#BringYourOwnVulnerableDriver #BYOVD #Cybersicherheit #EDRKiller #EndpointDetection #ITSicherheit @Logpoint #Mikrosegmentierung #WindowsFilteringPlatform #ZeroTrust

netzpalaver.de/2025/...