Cybersecurity company Sophos has identified a utility tool named EDRKillShifter, which aims to disable endpoint detection and response (EDR) systems, strengthening attackers’ possibilities of carrying out a successful ransomware attack. This discovery forms part of a growing trend, with increasingly sophisticated malware being developed to bypass EDR systems. To safeguard against these threats, Sophos recommends activating tamper protection, implementing stringent Windows security measures and regularly updating systems.
FakeUpdates leads India’s malware threats in May: Check Point report
Check Point Software Technologies’ Global Threat Index for May 2025 identifies FakeUpdates as the most widespread malware threat in India. Other active malware families include
