Tag: fatmalloc

1 Attack Reports | 0 Vulnerabilities

Attack reports

How a Tax Search Leads to Kernel-Mode AV/EDR Kill

A large-scale malvertising campaign targeting U.S. tax form searchers has been uncovered. The attack chain begins with Google Ads, using dual commercial cloaking services to evade detection. Victims are directed to rogue ScreenConnect installers, leading to a multi-stage crypter that ultimately dep…
screenconnect
malvertising
google ads
edr evasion
byovd
cloaking
kernel driver
2026-03-19
fatmalloc
hwaudkiller
tax lure
Published: March 19, 2026
Downloadable IOCs: 12
Click here to see more Attack Reports