GhostDriver

GhostDriver 👻 概要 GhostDriverは、BYOVDを使用したRust製のAVキラー（アンチウイルス無効化）ツールです。 始め方 1. rust-lang.orgからRustをインストールします 2. クローン: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. ビルド: cargo build --release --target=x8664-pc-windows-msvc 4. 実行: GhostDriverバイナリを実行します 使用方法: root@kitploit:...

Driver of destruction: How a legitimate driver is being used to take down AV processes

Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...