7
RealBlindingEDR Tool That Permanently Turns Off AV/EDR Using Kernel Callbacks
(cybersecuritynews.com)
this post was submitted on 15 Oct 2025
7 points (100.0% liked)
cybersecurity
5183 readers
12 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
Enjoy!
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
That’s why any EDR worth its salt has detected both this and the attempted abuse of the signed drivers it uses since early 2024. Many will also block it from running.