Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Hackers Exploit Windows Policy to Load Malicious Kernel Drivers
Malware and Vulnerabilities
July 13, 2023
Bleeping Computer
Kernel-mode drivers operate at the highest privilege level on Windows (Ring 0), allowing complete access to the target machine for stealthy persistence, undetectable data exfiltration, and the ability to terminate almost any process.
Read More
Kernel-mode Drivers
Malicious Kernel Drivers
Windows policy
HookSignTool
FuckCertVerify
Publisher
Previous
Microsoft Thwarts Chinese Cyberattack Targeting Western ...
Breaches and Incidents
Next
British Prosecutors Say Teen Lapsus$ Member Was Behind ...
Incident Response, Learnings