Malware 'kill-floor.exe' Exploits Avast Driver, Disables 142 Security Processes

Nov 25, 2024, 11:30 AM

Researchers have uncovered a new malware campaign that exploits a legitimate Avast Anti-Rootkit driver to disable security software. This BYOVD (Bring Your Own Vulnerable Driver) technique allows the malware to bypass antivirus protections and take control of infected systems. The malware, identified as 'kill-floor.exe,' is capable of disabling 142 security processes, thereby evading security defenses and compromising system integrity. The discovery, reported by The Hacker News and Security Affairs, highlights significant vulnerabilities within trusted software components, posing a substantial threat to cybersecurity.