BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Experts spotted the ALPHV/BlackCat ransomware group using signed malicious Windows kernel drivers to evade detection. Trend Micro researchers shared details about ALPHV/BlackCat ransomware incident that took place on February 2023. A BlackCat affiliate employed signed malicious Windows kernel drivers to evade detection. Experts believe the driver is a new version of the malware reported in December 2022 […]

The post BlackCat Ransomware affiliate uses signed kernel driver to evade detection appeared first on Security Affairs.

affiliate alphv blackcat blackcat ransomware breaking news detection driver drivers evade experts february hacking incident information security news it information security kernel kernel driver malicious malware micro pierluigi paganini ransomware ransomware group researchers trend trend micro version windows windows kernel