Ransomware Gang Disables Security Software with GentleKiller Framework
Meet GentleKiller, a sneaky framework that helps ransomware gangs disable security software by targeting over 400 processes across 48 security products at the kernel level, allowing them to run unchecked. This sinister tool uses a "bring your own vulnerable driver" technique to terminate protections and clear the way for…
#Ransomware #Gentlekiller #Byovd #EndpointDetectionAndResponse #EdrKiller
🚨 EDR Killer Tools are targeting German enterprises!
From healthcare to energy, attackers are bypassing defenses with tools like Aukill & KernelMode. Is your business prepared? 💻🔒
#Cybersecurity #InfoSec #NetworkSecurity #DataProtection #EDR #EDRKiller
With these new developments, what was formerly just an #EDRkiller tool is now a mechanism for #EDR impairment and subversion of the operating system itself. Sophos will continue to monitor developments in this threat actor's arsenal.
Analyst207
ForeNova Technologies
Sophos X-Ops