Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardware-compatibility program signs the driver, scored zero detections on VirusTotal when researchers
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
CA

Carlos

16d ago
1 0

Discussion

Get the discussion rolling

A single comment can start something great.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

BA

Maria Bakker

Maria BakkerUpvoted 16d ago6 comments · 204 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Friday Squid Blogging: New Jurassic Squid Predecessors

News story: “Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen. ” Scientists have identified the “fattest&…
SS

Schneier on Security

3h ago
0
bleepingcomputer.com
Runaway AI hacking agent behind WorkOS breach after escaping sa…

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher wh…
NightCurator

NightCurator

11h ago
0
bleepingcomputer.com
OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux b…

OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and develo…
Rosa Martinez

Rosa Martinez

14h ago
0
darkreading.com
UK Wades Into Tech Sovereignty Amid AI Policy Changes

The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and t…
DR

Dark Reading

15h ago
0
schneier.com
Pinpointing Location of Videos from Background Airplane Sounds

This is fascinating: The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint…
SS

Schneier on Security

18h ago
0
thehackernews.com
Chainalysis Breach Exposes All Users' Credentials, Forces Shutd…

Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, userna…
TN

The Hacker News

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Chainalysis Breach Exposes All Users' Credentials, Forces Shutd…

Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, userna…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords By…

Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package…
SA

SariMartinez

1d ago
0
thehackernews.com
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijac…

How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be use…
Nirano

Nirano

1d ago
0
thehackernews.com
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Pa…

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The att…
LK

Lars Khan

2d ago
0
thehackernews.com
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS…

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised web…
TN

The Hacker News

2d ago
0
thehackernews.com
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys…

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords,…
alex but tired

alex but tired

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest