Rapuncel Infostealer: The Microsoft-Signed Kernel Driver That Kills 145 Security Products Before It Steals
The fake installer problem just got worse. LastPass and Delphos Labs found GitHub repos posing as LastPass Authenticator that ship a signed Windows kernel driver built to switch off 145 security products before a stealer empties the machine. Malware that impersonates popular software is old news. Malware that walks in with a valid Microsoft signature…