{"id":48773,"date":"2022-10-06T11:35:47","date_gmt":"2022-10-06T11:35:47","guid":{"rendered":"http:\/\/9d75e455-b088-4fbc-ab0a-039a845520c9"},"modified":"2022-10-06T11:35:47","modified_gmt":"2022-10-06T11:35:47","slug":"this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/","title":{"rendered":"This sneaky ransomware attack tries to switch off your security software"},"content":{"rendered":"<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large c-shortcodeImage-hasCaption\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage c-cmsImage_loaded\"><source media=\"(max-width: 767px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/68c9f1bf2b6748d001dbe3980b6640a3c820561c\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=768\" alt=\"hands-typing-on-a-laptop\"><source media=\"(max-width: 1023px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/ba422248c0d8212b40c5055625238fa21808a334\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1024\" alt=\"hands-typing-on-a-laptop\"><source media=\"(max-width: 1440px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\" alt=\"hands-typing-on-a-laptop\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\" alt=\"hands-typing-on-a-laptop\" height=\"801.3213780084945\" width=\"1200\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption>\n<div class=\"c-shortcodeImage_caption g-inner-spacing-right-small g-color-black\" readability=\"6\">\n<div class=\"c-ShortcodeContent\" readability=\"32\">\n<p>Hands typing on a laptop keyboard lit up with blue back-lighting.&nbsp;<\/p>\n<\/div>\n<\/div>\n<p> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">Image: Getty\/Manuel Breva Colmeiro<\/span><\/figcaption><\/figure>\n<p>A major ransomware gang is using a new technique that allows attacks to bypass detection by security products by exploiting a vulnerability in more than 1,000 drivers used in antivirus software.&nbsp;<\/p>\n<p>The technique has been detailed by <a href=\"https:\/\/news.sophos.com\/en-us\/2022\/10\/04\/blackbyte-ransomware-returns\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">cybersecurity researchers at Sophos<\/a>, who&#8217;ve seen it being used in attacks by the BlackByte ransomware gang.&nbsp;<\/p>\n<p>BlackByte is a relatively new <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-an-executive-guide-to-one-of-the-biggest-menaces-on-the-web\/\" rel=\"follow\">ransomware<\/a> operation, but a series of attacks going after critical infrastructure and <a href=\"https:\/\/www.zdnet.com\/article\/blackbyte-ransomware-attacks-san-francisco-49ers-ahead-of-super-bowl\/\" rel=\"follow\">other high-profile targets<\/a> have led to&nbsp;<a href=\"https:\/\/www.cisa.gov\/uscert\/ncas\/current-activity\/2022\/02\/15\/fbi-and-usss-release-advisory-blackbyte-ransomware\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">the FBI issuing a warning about the group<\/a>.&nbsp;<\/p>\n<p><strong>Also:&nbsp;<\/strong><a href=\"https:\/\/www.zdnet.com\/article\/the-scary-future-of-the-internet-how-the-tech-of-tomorrow-will-pose-even-bigger-cybersecurity-threats\/\" rel=\"follow\">The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats<\/a><\/p>\n<p>Now the BlackByte ransomware gang is apparently using <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-16098\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">CVE-2019-16098<\/a>, a vulnerability in RTCorec64.sys, a graphics utility driver for Windows systems. This driver is legitimately used for overclocking by providing extended control over the graphics card.&nbsp;<\/p>\n<p>However, by exploiting the vulnerability, attackers which have gained access to an authenticated user account that can read and write to arbitrary memory, which could be exploited for privilege escalation, code execution or accessing information.&nbsp;<\/p>\n<p>Researchers describe this as &#8220;Bring Your Own Driver&#8221;. When abused, it allows attackers to bypass more than 1,000 drivers used by industry endpoint detection and response (EDR) products \u2013 antivirus software.&nbsp;<\/p>\n<p>This tactic is achieved by exploiting the vulnerability to communicate directly with the targeted system&#8217;s kernel and telling it to switch off routines used in antivirus software, as well as ETW (Event Tracing for Windows).<\/p>\n<p>&#8220;If you think of computers as a fortress, for many EDR providers, ETW is the guard at the front gate. If the guard goes down, then that leaves the rest of the system extremely vulnerable. And, because ETW is used by so many different providers, BlackByte&#8217;s pool of potential targets for deploying this EDR bypass is enormous,&#8221; said Christopher Budd, senior manager for threat research at Sophos.&nbsp;<\/p>\n<p>By abusing this vulnerability, BlackByte can gain the privileges required to quietly access systems, before triggering a ransomware attack and demanding a ransom payment for the decryption key. Like many other ransomware groups, BlackByte also steals data from victims and <a href=\"https:\/\/www.zdnet.com\/article\/this-company-paid-a-ransom-demand-hackers-leaked-its-data-anyway\/\" rel=\"follow\">threatens to release it if their extortion demands aren&#8217;t met<\/a>.&nbsp;<\/p>\n<p><strong>Also: <\/strong><a href=\"https:\/\/www.zdnet.com\/article\/the-biggest-cyber-crime-threat-is-also-the-one-that-nobody-wants-to-talk-about\/\" rel=\"follow\">The biggest cybercrime threat is also the one that nobody wants to talk about<\/a><\/p>\n<p>In order to help protect against Bring Your Own Driver attacks, Sophos recommends that drivers are regularly updated, so any known vulnerabilities in them can be remedied. Researchers also recommend blocklisting drivers that are known to still be exploitable.&nbsp;<\/p>\n<p>&#8220;It&#8217;s critical for defenders to monitor new evasion and exploitation techniques and implement mitigations before these techniques become widely available on the cybercrime scene,&#8221; said Budd.&nbsp;<\/p>\n<p><a href=\"https:\/\/www.zdnet.com\/article\/ransomware-why-its-still-a-big-threat-and-where-the-gangs-are-going-next\/\" rel=\"follow\">Ransomware continues to be one of the biggest cybersecurity issues facing organisations today<\/a>. Additional steps that organisations can take to help protect against ransomware and other malware attacks include <a href=\"https:\/\/www.zdnet.com\/article\/youve-still-not-patched-it-hackers-are-using-these-old-software-flaws-to-deliver-ransomware\/\" rel=\"follow\">applying security patches and updates<\/a> in a timely fashion, as well as providing <a href=\"https:\/\/www.zdnet.com\/article\/why-mfa-matters-these-attackers-cracked-admin-accounts-then-used-exchange-to-send-spam\/\" rel=\"follow\">multi-factor authentication<\/a> to users. &nbsp;<\/p>\n<p>These can help <a href=\"https:\/\/www.zdnet.com\/article\/why-you-really-need-multi-factor-authentication-these-ransomware-hackers-gave-up-when-they-saw-it\/\" rel=\"follow\">prevent cyber criminals from being able to access the network in the first place<\/a>.&nbsp;<\/p>\n<h3><strong>MORE ON CYBERSECURITY<\/strong><\/h3>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers detail how one ransomware gang has started using a new technique to help power extortion attacks.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-48773","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-06T11:35:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"This sneaky ransomware attack tries to switch off your security software\",\"datePublished\":\"2022-10-06T11:35:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/\"},\"wordCount\":550,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/b92aeafb6a37224c66c346a0831226d921409d44\\\/2022\\\/10\\\/06\\\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\\\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/\",\"name\":\"This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/b92aeafb6a37224c66c346a0831226d921409d44\\\/2022\\\/10\\\/06\\\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\\\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\",\"datePublished\":\"2022-10-06T11:35:47+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/b92aeafb6a37224c66c346a0831226d921409d44\\\/2022\\\/10\\\/06\\\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\\\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/b92aeafb6a37224c66c346a0831226d921409d44\\\/2022\\\/10\\\/06\\\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\\\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"This sneaky ransomware attack tries to switch off your security software\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/","og_locale":"en_US","og_type":"article","og_title":"This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-10-06T11:35:47+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"This sneaky ransomware attack tries to switch off your security software","datePublished":"2022-10-06T11:35:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/"},"wordCount":550,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/","url":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/","name":"This sneaky ransomware attack tries to switch off your security software 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200","datePublished":"2022-10-06T11:35:47+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/b92aeafb6a37224c66c346a0831226d921409d44\/2022\/10\/06\/5d77b2dd-7412-4ce9-a0f0-a5bb536467fb\/hands-typing-on-a-laptop.jpg?auto=webp&amp;width=1200"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/this-sneaky-ransomware-attack-tries-to-switch-off-your-security-software\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"This sneaky ransomware attack tries to switch off your security software"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=48773"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48773\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=48773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=48773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=48773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}