Advertisement
HIGH
Threat Intel
GentleKiller EDR Framework: The Gentlemen RaaS Defense Evasion Tactics
The Gentlemen RaaS leverages the GentleKiller framework to terminate 400+ security processes. Learn how this tool impairs EDR and antivirus defenses.
Runtime Rebel Intel
4 min read·Jun 20, 2026
HIGH
Threat Intel
Combatting EDR-Killer Tools and BYOVD Attack Techniques
Defenders face new challenges as the EDR-killer ecosystem expands, utilizing Bring Your Own Vulnerable Driver (BYOVD) to disable security agents.
Runtime Rebel Intel
3 min read·Apr 15, 2026
HIGH
Malware
54 EDR Killers Use BYOVD to Abuse 34 Signed Drivers
Analysis reveals 54 EDR killer programs abusing 34 signed drivers via BYOVD to neutralize security before ransomware deployment.
Runtime Rebel Intel
3 min read·Mar 19, 2026
HIGH
Malware
BlackSanta Malware Targets HR Workflows to Disable EDR Systems
Russian-speaking threat actors deploy BlackSanta malware via hijacked HR workflows to terminate EDR agents and facilitate undetected data exfiltration.
Runtime Rebel Intel
3 min read·Mar 10, 2026