Cybercriminals launch new malware that can completely wipe out your antivirus

EDRKillShifter is being used by multiple threat actors, experts claim

OK, this is not great news. A new type of malware has been discovered that can bypass antivirus software to install ransomware on devices.

This malware, known as EDRKillShifter, is used by cyber criminals to disable Endpoint Detection and Response (EDR) tools, which are crucial for keeping your systems safe. Once these protections are down, your devices are left vulnerable to ransomware attacks, which can lock you out of your data and demand a hefty ransom to regain access.

And the really scary bit? This malware could be available on the dark web, meaning it might be used by multiple attackers. If your business isn’t protected, the consequences could be severe, including data loss, financial damage, and a big hit to your reputation. Ouch.

So, how can you keep your business safe?

First, make sure your security software has tamper protection enabled, which can prevent attackers from disabling it.

Next, keep your systems and software up to date. This includes ensuring that older, vulnerable drivers are no longer in use.

Lastly, practice strong security hygiene by limiting admin rights and securing Windows security roles to make it harder for attackers to gain control of your systems.

​Want to Read the Full Article? Click Here!

If you think your business might be vulnerable, contact Tech Force today to discuss your I.T. needs and how we can help take the worry out of your I.T!