EDR-Redir V2 Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 1, 2025
Last Seen
November 3, 2025

EDR-Redir V2 is a malware family that concentrates on evading endpoint security by masquerading its components as fake program files on Windows systems.

Overview

EDR-Redir V2 is a malware family that concentrates on evading endpoint security by masquerading its components as fake program files on Windows systems. The variant is notable for bypassing Windows Defender, enabling stealth execution and potential impact across infected endpoints. Its significance lies in illustrating evolving evasion techniques that challenge traditional Defender-based protections and necessitate enhanced monitoring of file masquerading behaviors.

Related Threat Clusters

Recent Intelligence Reports

  • EDR-Redir V2 Evades Windows Defender Using Fake Program Files — Cyberpress · November 3, 2025
  • OpenAI's New Aardvark GPT — Cybersecuritynews · November 2, 2025
  • EDR-Redir V2: Blind EDR With Fake "Program Files" — Reddit · November 1, 2025

CVSS v3.1 Breakdown