{"id":276554,"date":"2026-06-19T16:07:00","date_gmt":"2026-06-19T20:07:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/19\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform\/"},"modified":"2026-06-19T22:10:19","modified_gmt":"2026-06-20T02:10:19","slug":"threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/19\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform\/","title":{"rendered":"Threat actor adds advanced &#8216;EDR killer&#8217; tools to ransomware-as-a-service platform"},"content":{"rendered":"<p><a href=\"https:\/\/www.csoonline.com\/article\/4187329\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform.html\">Threat actor adds advanced &#8216;EDR killer&#8217; tools to ransomware-as-a-service platform<\/a><\/p>\n<p><a href=\"https:\/\/www.csoonline.com\/article\/4187329\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform.html\">https:\/\/www.csoonline.com\/article\/4187329\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-06-19 16:07:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.csoonline.com\">www.csoonline.com<\/a><\/p>\n<p>The principle behind BYOVD is simple enough: once an attacker has gained admin privileges through an account takeover, they load a legitimate, but old and vulnerable vendor driver, inside which lies an exploitable vulnerability. This extends the power of admin control to kernel level, allowing them to target the EDR drivers in a direct way.<\/p>\n<p>EDR tools\u2019 vulnerability to a newer generation of evasion techniques has been known for some time; a 2024 study by security company Trellix highlighted this weakness, and earlier this year, another security vendor, Huntress, reported a recent case in which BYOVD had been used to load and target a vulnerable old driver to shut down EDR defenses.<\/p>\n<p>\u201cThe biggest defense obstacle is the fact that EDR killers rely on vulnerable non-malicious drivers that are often still used legitimately,\u201d noted Sou\u010dek.<\/p>\n<p><a href=\"https:\/\/www.csoonline.com\/article\/4187329\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Threat actor adds advanced &#8216;EDR killer&#8217; tools to ransomware-as-a-service platform https:\/\/www.csoonline.com\/article\/4187329\/threat-actor-adds-advanced-edr-killer-tools-to-ransomware-as-a-service-platform.html Publish Date: 2026-06-19 16:07:00&#8230;<\/p>\n","protected":false},"author":1,"featured_media":276555,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.csoonline.com\/wp-content\/uploads\/2026\/06\/4187329-0-35394600-1781899669-shutterstock_2481500073.jpg?quality=50&strip=all&w=1024","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[34,27],"class_list":["post-276554","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-threat-actor","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276554"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=276554"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276554\/revisions"}],"predecessor-version":[{"id":276556,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276554\/revisions\/276556"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/276555"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=276554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=276554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=276554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}