Update: On 13 Nov 2017 we noted an article that looks pretty familiar. You can read the article at the following link. As such we thought we would update our article but we have one questions for the authors of this article. What about the other vectors? The zero days that cannot be patched? The DLL issue we already explained years ago but what about the operating system hooks? As mentioned in a previous blog post we have been warning users of Antivirus products that certain

Back on August 25th Jigsaw reported on an issue with anti-virus technologies and the threat they actually pose to organizations. We wanted to put out an alert because we started seeing machines compromised through clever manipulation of anti-virus code that was running as Administrator (simply because it has to). So it was surprising while monitoring our OSINT sources today to see an article on Dark Reading titled "New Microsoft Kernel Bug Could Permit Malicious Modules". Wha

One of the things we have noted is there is a shift away from Anti-Virus products and a move toward better technologies such as network traffic string detection. As we reported earlier this year we are seeing very specific attacks on Anti-Virus technology itself. In fact we have seen some actors targeting the Anti-Virus eco-system by exploiting the fact that Anti-Virus has to run as a privileged process to actually be effective. Because of this hackers are starting to target