A security flaw has allowed a ransomware gang to effectively prevent antivirus programs from running properly on a system.
As reported by Bleeping Computer, the BlackByte ransomware group is utilizing a newly discovered method related to the RTCore64.sys driver to circumvent more than 1,000 legitimate drivers.
Once the drivers have been turned off by the hackers, they can operate under the radar due to the lack of multiple endpoint detection and response . The vulnerable drivers are able to pass an inspection via a valid certificate, and they also feature high privileges on the PC itself. Due to the exploit, threat actors can freely read, write, or execute code within a system’s kernel memory.
Furthermore, the group’s malware scans the system for any potential hooking DLLs connected to Avast, Sandboxie, Windows DbgHelp Library, and Comodo Internet Security. Should any be found by the search, BlackByte disables its ability to function.
México Últimas Noticias, México Titulares
Similar News:También puedes leer noticias similares a ésta que hemos recopilado de otras fuentes de noticias.
OpenSea to allow users to submit bulk NFT listings and purchasesThe service's recent innovations seem to have come during a time when its daily traded volume has plummeted drastically.
Leer más »
Miles Bridges, Hornets Allow $7.9M Qualifying Offer To ExpireMiles Bridges, Hornets Allow $7.9M Qualifying Offer To Expire - RealGM Wiretap
Leer más »
D.C. Council advances bill to allow noncitizens to vote in local electionsIf the bill passes, qualifying noncitizens would be allowed to vote in all local races, but not federal elections.
Leer más »
Court dismisses lawsuit challenging New York City's outdoor dining programA New York state appellate court dismissed a lawsuit Wednesday challenging New York City's outdoor dining program.
Leer más »
Nyrstar’s Port Pirie lead smelter to shut for 55 daysThe planned suspension will allow the company to improve emissions and operational performance.
Leer más »
Will Oscar Voters Even Consider Voting for Will Smith for ‘Emancipation’? “We Have to Allow People to Grow,” “No Chance,” “F*** Him”The Hollywood Reporter surveyed dozens of Academy members in the wake of Apple's announcement that it will release Smith's latest film in December, less than a year after his infamous slap of Chris Rock at the Oscars.
Leer más »