Defendnot is a tool developed by “es3n1n” that disables Windows Defender by exploiting the Windows Security Center (WSC) API to impersonate a legitimate antivirus. It registers itself as a phantom antivirus, requiring administrative privileges. While showcasing advanced reverse engineering techniques, security experts warn it could be misused by malware to disable security protections.
New Phishing Attack Abusing Blob URLs to Bypass SEGs and Evade Analysis
Cybersecurity experts have uncovered a new phishing technique using blob URIs that bypasses Secure Email Gateways (SEGs). This method involves linking to legitimate sites, redirecting
