GoFlyDrv.sys: Vulnerable Driver Abused in BYOVD Attacks by Cruciferra
GoFlyDrv.sys is a vulnerable driver abused by Cruciferra as part of bring-your-own-vulnerable-driver (BYOVD) attacks to terminate security processes on Windows systems.
Tag: vulnerable driver
NSecKrnl.sys: Vulnerable Driver Used to Tamper with Endpoint Security
A vulnerable driver (NSecKrnl.sys) was used by Storm-2603 as a conduit to tamper with endpoint security protections and reduce visibility.