This article was created by StackCommerce. Postmedia may earn an affiliate commission from purchases made through our links on this page.
Attackers abused a signed but long-revoked EnCase Windows kernel driver in a BYOVD attack to terminate all security tools.