Catalin Cimpanu11h ago

The Qilin ransomware group appears to be running the most powerful EDR killer available today, with the capability to terminate over 300 different EDR drivers from almost every vendor in the market

https://blog.talosintelligence.com/qilin-edr-killer/

Qilin EDR killer infection chain

This blog provides an in-depth analysis of the malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems.

Cisco Talos Blog
Show threadVessOnSecurity
@campuscodi Would have been helpful if they had provided a list of these EDRs instead of a screenshot of a minuscule part of the list.
10:54amWeb