A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardwarecompatibility program signs the driver, scored zero detections on VirusTotal when researchers.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity