Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus

There have already been reports on code-signed rootkits like Netfilter, FiveSys, and Fire Chili. These rootkits are usually signed with stolen certificates or are falsely validated. However, when a legitimate driver is used as a rootkit, that’s a different story. Read More …

Chinese hackers Deep Panda return with Log4Shell exploits, new Fire Chili rootkit

Deep Panda has launched new attacks this month that exploit Log4Shell to deploy the new Fire Chili rootkit. Deep Panda is a Chinese advanced persistent threat (APT) hacking group that has been active for at least a decade. The APT Read More …