Shared Secret: EDR Killer In The Kill Chain
Sophos, Wednesday, August 6th, 2025
A look under the hood at a tool designed to disable protections
In today's multi-stage attacks, neutralizing endpoint security solutions is a critical step in the process, allowing threat actors to operate undetected. Since 2022, we've seen an increase in the sophistication of malware designed to disable EDR systems on an infected system.