Skip to main content

Glossary

Defense Evasion

A category of adversary techniques used to avoid detection throughout an attack, such as disabling security tools, obfuscating malicious code, or abusing trusted processes. It spans many specific techniques, including living-off-the-land and polymorphic malware.

Recent coverage mentioning Defense Evasion

Slim Spider Targets Brazilian Financial Systems and Crypto Assets
MEDIUM
Threat Intel

Slim Spider Targets Brazilian Financial Systems and Crypto Assets

Discover how the newly documented threat actor Slim Spider targets Brazilian financial infrastructure and cryptocurrency assets.

Runtime Rebel Intel
3 min read · Sep 8, 2026
Silver Fox Malware Campaign Impersonates Software Vendors
MEDIUM
Malware

Silver Fox Malware Campaign Impersonates Software Vendors

An active Silver Fox malware campaign uses fake software download sites to disable Windows Update and weaken Microsoft Defender defenses.

Runtime Rebel Intel
3 min read · Sep 2, 2026
Weaponizing Defender's BTR.sys to Disable Security Software
MEDIUM
Vulnerabilities

Weaponizing Defender's BTR.sys to Disable Security Software

Attackers can weaponize a legitimate Microsoft Defender driver to delete security software at boot, impacting Windows 7-11.

Runtime Rebel Intel
4 min read · Aug 22, 2026
SPECTRE Malware: UAT-10147 Targets IIS, Linux Servers with Rootkits
HIGH
Threat Intel

SPECTRE Malware: UAT-10147 Targets IIS, Linux Servers with Rootkits

Chinese-speaking actor UAT-10147 deploys SPECTRE, a cross-platform implant featuring Linux rootkit and BYOVD EDR bypass capabilities.

Runtime Rebel Intel
5 min read · Aug 20, 2026
INFO
Threat Intel

Microsoft Removes WMIC Tool in Windows 11 to Curb Living-off-the-Land Tactics

Microsoft removes the legacy WMIC tool from Windows 11 builds to disrupt living-off-the-land techniques used by ransomware and malware.

Runtime Rebel Intel
2 min read · Aug 18, 2026
The Gentlemen Ransomware: Operations, Tools, and Mitigation
HIGH
Threat Intel

The Gentlemen Ransomware: Operations, Tools, and Mitigation

Analyzing The Gentlemen (Storm-2697) Ransomware-as-a-Service, its custom tooling, rapid victim surge in 2026, and mitigation.

Runtime Rebel Intel
4 min read · Aug 9, 2026

Advertisement

← All 285 glossary terms