build1 publisher
A Microsoft-signed driver in a fake LastPass installer kills 145 security processes from the kernel
Alinubx.sys terminates security agents from kernel mode under a Microsoft Windows Hardware Compatibility Publisher signature dated March 2023, and nothing in the driver has to be exploited for that to work.
Publishers:dev.to
Reality
- Evidence62
- Adoption40
- Hype gap+8
- Incentives55
- Confidence55