Hackers Advertised VOID ‘AV Killer’ with Kernel-level Termination Claims

The report details Crypt4You's VOID KILLER, a kernel-level tool marketed on underground forums to terminate antivirus and EDR processes (including Windows Defender and enterprise solutions like CrowdStrike and SentinelOne), using polymorphic builds and UAC bypass to evade detection; KrakenLabs analyzed advertising materials and a demonstration video, warning organizations of elevated risk and recommending defense-in-depth and kernel-level protections.