Tag: edr evasion

3 Attack Reports | 0 Vulnerabilities

Attack reports

Chasing the Silver Fox: Cat & Mouse in Kernel Shadows

Check Point Research uncovered an ongoing campaign by the Silver Fox APT group exploiting a previously unknown vulnerable driver to evade endpoint protection. The attackers used a Microsoft-signed WatchDog Antimalware driver to terminate protected processes on fully updated Windows systems. A dual-…
valleyrat
edr evasion
byovd
process termination
vulnerable driver
kernel exploitation
driver abuse
2025-08-28
signature manipulation
Published: August 28, 2025
Downloadable IOCs: 16

Camera off: Akira deploys ransomware via webcam

Akira, a prominent ransomware group, accounted for 15% of incidents in 2024, showcasing novel evasion techniques. In a recent attack, Akira circumvented an Endpoint Detection and Response (EDR) tool by compromising an unsecured webcam to deploy ransomware. After initial detection, the group pivoted…
ransomware
anydesk
iot
remote access
edr evasion
network segmentation
2025-03-11
akira ransomware
webcam
smb protocol
Published: March 11, 2025
Downloadable IOCs: 0

Ransomware attackers introduce new EDR killer to their arsenal

An analysis by security researchers has uncovered the existence of a new tool called EDRKillShifter, which is used by threat actors to disable endpoint protection software during ransomware attacks. The tool is designed to terminate antivirus and endpoint detection and response (EDR) solutions on t…
ransomware
ransomhub
privilege escalation
2024-08-16
edr evasion
driver exploitation
edrkillshifter
Published: August 16, 2024
Downloadable IOCs: 2
Click here to see more Attack Reports