Terminator antivirus killer is a vulnerable Windows driver in disguise

31-May-23

On a hacker forum in Russian, a threat actor going by the name Spyboy is hawking a programme dubbed “Terminator” that it claims can destroy any antivirus, XDR, or EDR platform. But according to CrowdStrike, its merely a clever Bring Your Own Vulnerable Driver (BYOVD) assault.

According to reports, Terminator can get past 24 different antivirus (AV), endpoint detection and response (EDR), and extended detection and response (XDR) security programmes, including Windows Defender, on Windows 7 and later-running machines.

Read More…