aukill – PossibleThreat Articles

It’ll be back: Attackers still abusing Terminator tool and variants

March 4, 2024 0 Comments aukill, blackbyte, byovd, drivers, featured, Ransomware, sophos x-ops, terminator, threat research, zam

Credit to Author: Matt Wixey| Date: Mon, 04 Mar 2024 11:00:08 +0000

First released in May 2023, an EDR killer – and the vulnerable Zemana drivers it leverages – are still of interest to threat actors, along with variants and ported versions

Security Sophos

‘AuKill’ EDR killer malware abuses Process Explorer driver

April 19, 2023 0 Comments active adversary, active adversary playbook, anti-edr, aukill, backstab, EDR, edr killer, featured, malware, process explorer, procexp, sophos x-ops, targeted attacks, threat research

Credit to Author: Andrew Brandt| Date: Wed, 19 Apr 2023 10:00:43 +0000

Driver based attacks against security products are on the rise