securityaffairsMar 24, 2025
#Medusa #ransomware uses malicious #Windows driver #ABYSSWORKER to disable security tools
https://securityaffairs.com/175790/security/medusa-ransomware-uses-abyssworker-driver.html
#securityaffairs #hacking
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools, making detection and mitigation more difficult.

Security Affairs
The Threat CodexMar 22, 2025
Shedding light on the ABYSSWORKER driver
#ABYSSWORKER #MedusaRansomware
https://www.elastic.co/security-labs/abyssworker
Shedding light on the ABYSSWORKER driver — Elastic Security Labs

Elastic Security Labs describes ABYSSWORKER, a malicious driver used with the MEDUSA ransomware attack-chain to disable anti-malware tools.