Ransomware crews add 'EDR killers' to their arsenal – and some aren't even malware
Not all EDR killers are malware. Talos incident responders came across one legitimate software tool called HRSword in a ...
Ransomware gangs increasingly brandish EDR bypass tools
Ransomware actors are increasingly abusing vulnerable drivers to craft tools known as "EDR killers," which can disrupt and ...
Medusa ransomware is able to disable anti-malware tools, so be on your guard
Researchers spot Medusa ransomware operators deploying smuol.sys This driver mimics a legitimate CrowdStrike Falcon driver ...
SecurityWeek5d
Ransomware Groups Increasingly Adopting EDR Killer Tools
ESET uncovers a link between RansomHub, Play, Medusa, and BianLian ransomware gangs as more groups adopt tools to disable EDR software.
The Hacker News4d
Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks
RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.
WeLiveSecurity6d
Shifting the sands of RansomHub’s EDRKillShifter
ESET researchers discover new ties between affiliates of RansomHub and of rival gangs Medusa, BianLian, and Play.
Another red teaming tool has been hijacked by criminals — EDRSilencer used to muffle defensive security tools
Short for Endpoint Detection and Response Silencer, the tool was designed to interfere with, or disable, EDR solutions that ...
CRN5y
Sophos Exec: Endpoint Detection And Response Tools Make It Easy To Act On Threats
EDR tools sit on the endpoint and record data that's either addressed directly on the endpoint or sent to the cloud somewhere to determine whether any of the behavior observed is anomalous and ...
JD Supra14d
Emergence of Medusa Ransomware
On March 12, 2025, the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Federal Bureau of Investigation (FBI) ...
Washington Technology2y
Why EDR Isn't Enough to Stop Cyber Attacks
Conventional EDR tools have gaps for protecting against attacks. Help protect your organization from endpoint security cyberthreats.
CRN6mon
Apple’s macOS Sequoia Release Causing Issues For EDR Tools: Reports
Microsoft Are ‘Rethinking’ Security After CrowdStrike Outage] TechCrunch cited posts on social media that have pointed to difficulties with endpoint detection and response (EDR) tools from ...
Yahoo Finance5d
Ransomware gangs increasingly brandish EDR bypass tools
Ransomware actors are increasingly abusing vulnerable drivers to craft tools known as "EDR killers," which can disrupt and even delete extended detection and response products in enterprise ...