AuKill tool uses BYOVD attack to disable EDR software

Ransomware operators use the AuKill tool to disable EDR software through Bring Your Own Vulnerable Driver (BYOVD) attack. Sophos researchers reported that threat actors are using a previously undocumented defense evasion tool, dubbed AuKill, to disable endpoint detection and response (EDR) software. The tool relies on the Bring Your Own Vulnerable Driver (BYOVD) technique to disable the […]

The post AuKill tool uses BYOVD attack to disable EDR software appeared first on Security Affairs.

attack aukill tool breaking news bring your own vulnerable driver byovd cyber crime cybercrime defense detection detection and response driver edr endpoint endpoint detection endpoint detection and response evasion hacking information security news it information security malware own pierluigi paganini ransomware researchers response security software sophos threat threat actors tool vulnerable vulnerable driver