Tool
RealBlindingEDR
- First Reported
- Dec 19, 2024
- Latest Reported
- Dec 19, 2024
Reported Context (1)
- “irrlicht.dll” and an encrypted file “server.log”. “EDR.exe” is a variant of the open-source tool RealBlindingEDR used to disable EDR programs by exploiting arbitrary memory write vulnerability in Dell’s binary How Threat Actors Exploit Vulnerable Windows Drivers in BYOVD Attacks
CVE (2)
Malware (7)
People (9)
Threat Actors (6)
MITRE ATT&CK (4)
Vendors (9)
Products (10)
Tools (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.