Tag: edrbypass

1 Attack Reports | 0 Vulnerabilities

Attack reports

Unmasking a Large-Scale Legacy Driver Exploitation Campaign

Check Point Research uncovered an extensive campaign exploiting a vulnerability in the legacy version 2.0.2 of the Truesight.sys driver, part of Adlice's RogueKiller Antirootkit suite. Attackers leveraged this vulnerability to deploy an EDR/AV killer module, effectively disabling security solutions…
phishing
exploitation
driver
2025-02-24
edrbypass
Published: February 24, 2025
Downloadable IOCs: 951
Click here to see more Attack Reports