Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Trend Micro reports observing threat actors leveraging EDRSilencer, a WFP-based tool that dynamically discovers EDR-related processes and installs persistent filters to block their outbound telemetry (IPv4/IPv6), effectively preventing alerts and logs from reaching management consoles; the report includes affected EDR process names, an SHA256 IOC, attack chain and mitigation/hunting guidance.