SideWinder APT Exploits EDRSilencer Tool for SYSTEM Level Code Execution in Recent Attacks

Oct 16, 2024, 02:50 PM

Recent investigations have revealed that cybercriminals are exploiting the open-source tool EDRSilencer to compromise Endpoint Detection and Response (EDR) solutions. This tool, originally designed for red team operations, has been manipulated by threat actors to evade detection and conceal malicious activities. Researchers noted that the SideWinder Advanced Persistent Threat (APT) group is among those utilizing EDRSilencer in their latest attacks, which appear to have a broad geographic impact. The analysis indicates that these hackers are leveraging a recent software vulnerability to achieve SYSTEM-level code execution, thereby enhancing their capabilities for remote monitoring and management of compromised systems.