Synthèse
Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer.
Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer.
Source originale
securityaffairs.com
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR ↗
thehackernews.com · 21 sept.
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer ↗
securityweek.com · 21 sept.