Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardware-compatibility program signs the driver, scored zero detections on VirusTotal when researchers
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
CA

Carlos

5h ago
0 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Reverse-Engineering Flock Cameras

Hackers captured a Flock camera and got a look (alternate link) at the software: While much of the automatic license plate reader’s (ALPR) most sensitive…
SS

Schneier on Security

59m ago
0
thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

5h ago
0
bleepingcomputer.com
Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-fa…
CA

Carlos

8h ago
0
bleepingcomputer.com
Microsoft: September updates break File History backup feature

Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates…
LK

Lars Khan

9h ago
0
thehackernews.com
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C…

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared…
CA

Carlos

12h ago
0
thehackernews.com
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF an…

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information techno…
TN

The Hacker News

14h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

5h ago
0
thehackernews.com
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C…

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared…
CA

Carlos

12h ago
0
thehackernews.com
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF an…

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information techno…
TN

The Hacker News

14h ago
0
thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Lea…

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Account…

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of sev…
Rosa Martinez

Rosa Martinez

2d ago
0
thehackernews.com
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private Gi…

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on Sept…
CA

Carlos

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest