Frequency
2
occurrences
First Seen
January 21, 2026
Last Seen
January 21, 2026
Related Threat Clusters
-
Hackers Exploit Security Driver to Disable Endpoint Protection for Ransomware Deployment
Hackers have weaponized over 2,500 variants of the truesight.sys security driver from Adlice Software's RogueKiller antivirus to disable endpoint protection mechanisms prior to launching ransomware attacks. This…
2 articles · Updated January 21, 2026
Recent Intelligence Reports
- Hackers Weaponized 2,500+ Security Tools to Terminate Endpoint Protection Before Deploying Ransomware — Cybersecuritynews · January 21, 2026
- Hackers Weaponize 2,500+ Security Tools to Disable Endpoint Defenses Before Ransomware Attacks — Gbhackers · January 21, 2026