Tag: av killer

1 Attack Reports | 0 Vulnerabilities

Attack reports

ThrottleStop driver abused to terminate AV processes

A recent incident response case in Brazil revealed a new antivirus (AV) killer software circulating since October 2024. This malware abuses the ThrottleStop.sys driver to terminate numerous antivirus processes, employing a technique known as BYOVD (Bring Your Own Vulnerable Driver). The attack bega…
ransomware
byovd
medusalocker
kernel exploitation
2025-08-06
CVE-2025-7771
driver abuse
av killer
throttlestop
Published: August 6, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports