EDRChoker is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 7, 2026; most recent activity June 8, 2026.
The EDRChoker tool, recently released as an open-source red team utility, disrupts Endpoint Detection and Response (EDR) systems by manipulating Windows' Policy-Based Quality of Service (QoS) settings. This innovative…