Threat Actors Advertised NtKiller Malware on Dark Web Claiming Terminate Antivirus and EDR Bypass

A criminal actor, "AlphaGhoul", is advertising a commercial tool called NtKiller that reportedly disables popular antivirus and EDR products, leverages early-boot persistence, offers rootkit and UAC bypass options, and includes modules for advanced evasion (HVCI/VBS/memory integrity manipulation); the tool is sold with modular pricing but its capabilities remain unverified by third parties.