Ransomware gangs now use more EDR killers that do not rely on vulnerable drivers, ESET says

Ransomware groups are using a wider range of tools to shut down security products before they launch encryption, and ESET says the trend now goes well beyond the familiar Bring Your Own Vulnerable Driver, or BYOVD, technique. In a new deep dive published in March 2026, ESET said affiliates increasingly mix vulnerable drivers with scripts, […] The post Ransomware gangs now use more EDR killers that do not rely on vulnerable drivers, ESET says appeared first on VPN Central.