⚠️ A defense evasion tool called ExEngine is being sold as a service, marketed as an AV/EDR kille...
ExEngine defense evasion tool sold as service to disable AV/EDR software.
ExEngine is a defense evasion tool being marketed and sold as a service that targets mainstream antivirus and EDR solutions including Windows Defender, Malwarebytes, Bitdefender, and Avast. The tool combines AV termination capabilities with a Ring-3 rootkit and UAC bypass functionality to evade security controls. This represents a growing threat landscape where adversaries purchase pre-built evasion capabilities to support broader attack campaigns.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Windows Defender?
Get an email when a new story names Windows Defender, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ExEngine