GentleKiller Framework Disables Victims' Security Software

**Executive summary:** ESET analysis describes the Gentlemen RaaS group's 'GentleKiller' suite that leverages BYOVD (legitimately signed but flawed kernel drivers) to kill endpoint protection at kernel level, targeting over 400 processes across roughly 48 security products; the operator-run toolkit includes multiple variants and rapidly adapts disclosed driver exploits, and defenders are advised to block known-vulnerable drivers and monitor abrupt termination of protected security processes.