Tag: abyssworker

1 Attack Reports | 0 Vulnerabilities

Attack reports

Shedding light on the ABYSSWORKER driver

The ABYSSWORKER driver is a malicious tool used in conjunction with MEDUSA ransomware to disable anti-malware systems. It employs a HEARTCRYPT-packed loader and a revoked certificate-signed driver to target and silence EDR vendors. The driver imitates a legitimate CrowdStrike Falcon driver and uses…
obfuscation
ransomware
medusa
edr
driver
heartcrypt
process termination
2025-03-20
abyssworker
file manipulation
Published: March 20, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports