GhostDriver

GhostDriver 👻 О проекте GhostDriver — это написанный на Rust инструмент для отключения антивирусов AV killer, использующий BYOVD. Начало работы 1. Установите Rust с rust-lang.org 2. Клонируйте: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. Соберите: cargo build --release...

Driver of destruction: How a legitimate driver is being used to take down AV processes

Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...