Get the latest tech news
Hackers can bypass Microsoft Defender to install ransomware on PCs
By exploiting a legitimate driver, hackers can load their own malicious driver to bypass Microsoft Defender.
With kernel-level access, the hacker can then load their own malicious driver—in this case, hlpdrv.sys, which modifies the Windows Registry and causes Microsoft Defender to disable its protective measures. This two-punch approach has been flagged by GuidePoint Security as the deployment method for Akira ransomware attacks, which have been ongoing since July of this year. Mikael has a firm grasp on which gadgets are released, and what is happening with the streaming services and the latest AI tools.
Or read this on r/technology
