BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Experts spotted the ALPHV/BlackCat ransomware group using signed malicious Windows kernel drivers to evade detection. Trend Micro researchers shared details about ALPHV/BlackCat ransomware incident that took place on February 2023. A BlackCat affiliate employed signed malicious Windows kernel drivers to evade detection. Experts believe the driver is a new version of the malware reported in December 2022 […]

The post BlackCat Ransomware affiliate uses signed kernel driver to evade detection appeared first on Security Affairs.