PoorTry Windows driver evolves into a full-featured EDR wiper The malicious PoorTry kernel-mode Windows driver used by multiple ransomware gangs to turn off Endpoint Detection and Response (EDR) solutions has evolved into an EDR wiper, deleting files crucial for...

PoorTry Windows driver evolves into a full-featured EDR wiper
www.bleepingcomputer.com/news/securit...

#Infosec #Security #Cybersecurity #CeptBiro #PoorTry #WindowsDriver #EDRwiper

Lazarus APT exploited 0-day in Win driver to gain kernel privileges North Korea-linked Lazarus exploited a zero-day in the Windows AppLocker driver (appid.sys) to gain kernel-level access to target systems.

Lazarus APT exploited zero-day in Windows driver to gain kernel privileges
securityaffairs.com/159728/apt/l...
#Infosec #Security #Cybersecurity #CeptBiro #Lazarus #APT #ZeroDay #WindowsDriver #KernelPrivileges