GootKit Malware Bypasses Windows Defender by Setting Path Exclusions

Minimalist · Sep 6, 2019

As Windows Defender matures and becomes tightly integrated into Windows 10, malware writers are creating techniques to evade its detection. Such is the case with the GootKit banking Trojan, which use a UAC bypass and WMIC commands to exclude the malware executable from being scanned by Windows Defender Antivirus.
Click to expand...

https://www.bleepingcomputer.com/ne...-windows-defender-by-setting-path-exclusions/

Rasheed187 · Sep 7, 2019

I wonder what M$ has to say about this.

itman · Sep 7, 2019

WD's current internal whitelisting processing is very much its "Achilles heel." Similar techniques have been used to bypass Controlled Folders protection.

Log in or Sign up

GootKit Malware Bypasses Windows Defender by Setting Path Exclusions

Minimalist Registered Member

Rasheed187 Registered Member

itman Registered Member

Log in or Sign up

GootKit Malware Bypasses Windows Defender by Setting Path Exclusions

Minimalist Registered Member

Rasheed187 Registered Member

itman Registered Member

Useful Searches