Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers

This campaign, detailed in their report, reveals how attackers exploited the Avast Anti-Rootkit driver, aswArPot.sys, to bypass defenses, terminate security processes, and seize control of systems.“Instead of bypassing defenses.