Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus

Analyzing a recent attack sequence, researchers found that a code-signed driver called “mhyprot2.sys”, which provides the anti-cheat functions for Genshin Impact as a device driver, was being abused to bypass privileges.