Hackers Disable Windows Security With New Malware Attack

A sophisticated multi-stage Windows malware campaign uses business-themed shortcut lures and PowerShell loaders hosted on GitHub and Dropbox to trick users into disabling Microsoft Defender and recovery features; attackers register fake AV products, inject into trusted processes, and modify registry policies to disable protections, then deploy Amnesia RAT, Hakuna Matata ransomware, and WinLocker components to steal credentials and cryptocurrency data while encrypting or locking victims' systems.