build1 publisher
A Microsoft-signed driver in a fake GitHub download kills 145 security process names from kernel mode
LastPass TIME and Delphos Labs analysed a malware-as-a-service kit that arrives as a padded ZIP from an SEO-boosted fake repository and ends with a signed driver terminating security processes from kernel mode.
Publishers:dev.to
Reality
- Evidence45
- Adoption30
- Hype gap+12
- Incentives55
- Confidence40