EDR Killers Broaden Ransomware Tactics, ESET Warns

ESET telemetry-backed research shows ransomware affiliates are increasingly using nearly 90 distinct EDR-killer tools — including BYOVD vulnerable-driver exploits, legitimate anti-rootkit utilities repurposed to kill defenses, and emerging driverless techniques — to blind or cripple endpoint security prior to deploying ransomware. The report highlights commercialization of these tools, evidence of rapid adoption (and potential AI-assisted development), misleading attribution from reused drivers, and urges a prevention-first, multi-layered defensive approach combining BYOVD hardening, anti-rootkit monitoring, and telemetry-driven hunting.