Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus

We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused by a ransomware actor to kill antivirus processes and services for mass-deploying ransomware.

actor anti-cheat antivirus cheat driver genshin genshin impact impact kill ransomware reports trend micro research : articles trend micro research : endpoints trend micro research : ransomware trend micro research : research