Multiple ransomware vendors are using the same EDR killer tool, which not only adds to the trend in developing such payloads to terminate protections for systems but also suggests that competing threat actors are sharing tools and technical knowledge, which is another challenge for security vendors, Sophos says.
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2025/08/multiple-ransomware-groups-are-using-tool-to-kill-edr-defenses-sophos/
