A sophisticated cyber campaign has been uncovered, leveraging a loophole in Windows’ driver signing policy to bypass detection and deploy malware. The attackers exploited version 2.0.2 of the vulnerable Truesight.sys driver, part of Adlice’s RogueKiller Antirootkit suite, to disable endpoint detection and response (EDR) systems and antivirus (AV) solutions. This campaign, active since mid-2024, involved … Continue reading Silent Killers Exploiting Windows Policy Loophole to Evade Detections and Deploy Malware