Hackers Target Chinese Gamers With Microsoft-Signed Rootkit

Kernel mode driver can download second-stage payload directly to memory, allowing threat actors to evade endpoint detection and response tools.

chinese detection detection and response download driver endpoint endpoint detection endpoint detection and response evade gamers hackers kernel memory microsoft mode payload response rootkit stage target threat threat actors tools