Antivirus

Don’t take your antivirus software for granted

Security news is often sober, especially as of late. Many huge data breaches have come to light this year alone, and security vulnerabilities keep coming at us, too—like this week’s report about a massive issue with Secure Boot, one of the core methods used to keep your PC safe from sneaky attacks…

Security news is often sober, especially as of late. Many huge data breaches have come to light this year alone, and security vulnerabilities keep coming at us, too—like this week’s report about a massive issue with Secure Boot, one of the core methods used to keep your PC safe from sneaky attacks…
Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

Antivirus

Best free antivirus 2024: Keep your PC safe without spending a dime

A lot of time is spent looking at the best paid antivirus suites, but free antivirus solutions are worth discussion, too. After all, free versions are based on their paid counterparts. Good news is, when you see a free alternative to a paid version you like…

A lot of time is spent looking at the best paid antivirus suites, but free antivirus solutions are worth discussion, too. After all, free versions are based on their paid counterparts.

Good news is, when you see a free alternative to a paid version you like…
Read More

Continue Reading
Antivirus

Avast security tools hijacked in order to crack antivirus protection

Researchers spot new campaign that can turn off antivirus protection Malware uses legitimate Avast Anti-Rootkit driver to access kernel level Once antivirus is deactivated, the malware can proceed without detection Hackers are using a legitimate Avast Anti-Rootkit driver to disguise their malware, turn off antivirus protection, and infect systems, experts have warned. The vulnerable driver


  • Researchers spot new campaign that can turn off antivirus protection
  • Malware uses legitimate Avast Anti-Rootkit driver to access kernel level
  • Once antivirus is deactivated, the malware can proceed without detection

Hackers are using a legitimate Avast Anti-Rootkit driver to disguise their malware, turn off antivirus protection, and infect systems, experts have warned.

The vulnerable driver has been exploited in a number of attacks since 2021, with the original vulnerabilities being present since at least 2016, research by Trellix, has claimed, noting the malware can use the vulnerable driver to end the processes of security software at the kernel level.

The malware in question belongs to the AV Killer family, with the attack using a vector known as bring-your-own-vulnerable-driver (BYOVD) to infect the system.

Virus can turn off antivirus

Trellix outlined how the malware uses a file named ‘kill-floor.exe’ to place the vulnerable driver named ‘ntfs.bin’ into the default Windows user folder, before using the Service Control executable (sc.exe) to register the driver using the ‘aswArPot.sys’ service.

Included within the malware is a hardcoded list of 142 processes used by common security products, which is used to check system process snapshots for any matches.

The malware then uses the ‘DeviceIoControl’ API to run the relevant commands to end the process, thereby preventing the antivirus from detecting the malware.

The hardcoded list includes processes belonging to a number of security products from names such as McAfee, Avast, Microsoft Defender, BlackBerry, Sophos, and many more.

As BleepingComputer points out, this isn’t the first time a BYOVD attack has exploited a vulnerable Avast driver, with the 2021 Avoslocker ransomware attacks abusing an Avast Anti-R

Read More

Continue Reading
Antivirus

The best antivirus software for staying protected online

The top antivirus software options to protect your personal and financial data when shopping or browsing online…

The top antivirus software options to protect your personal and financial data when shopping or browsing online…
Read More

Continue Reading
Antivirus

Norton Antivirus Plus review: A slim suite for digital minimalists

At a glanceExpert’s Rating Pros Strong antivirus protection Essential protection against major online threats Simple, straightforward features Cons Performance impact on some PCs User interface would benefit from Consolidation Upselling of additional services Our Verdict A one-device limitation can feel tight to many people, but if that’s all you need…

At a glanceExpert’s Rating

Pros

Strong antivirus protection

Essential protection against major online threats

Simple, straightforward features

Cons

Performance impact on some PCs

User interface would benefit from Consolidation

Upselling of additional services

Our Verdict
A one-device limitation can feel tight to many people, but if that’s all you need…
Read More

Continue Reading