Ransomware gangs abuse Process Explorer driver to kill security software

Threat actors use a new hacking tool dubbed AuKill to disable Endpoint Detection & Response (EDR) Software on targets' systems before deploying backdoors and ransomware in Bring Your Own Vulnerable Driver (BYOVD) attacks. [...]

abuse amp attacks backdoors bring your own vulnerable driver byovd detection driver edr endpoint endpoint detection explorer gangs hacking hacking tool kill own process process explorer ransomware ransomware gangs response security security software software systems threat threat actors tool vulnerable vulnerable driver