Catalin Cimpanu

The Qilin ransomware group appears to be running the most powerful EDR killer available today, with the capability to terminate over 300 different EDR drivers from almost every vendor in the market

https://blog.talosintelligence.com/qilin-edr-killer/

Qilin EDR killer infection chain

This blog provides an in-depth analysis of the malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems.

Cisco Talos Blog
10:39amWeb
Show threadVessOnSecurity7h ago
@campuscodi Would have been helpful if they had provided a list of these EDRs instead of a screenshot of a minuscule part of the list.