EDR killer ransomware: What it is, how to repel

Cybersecurity firm Sophos has discovered a tool called EDRKillShifter designed to disable endpoint detection and response (EDR) systems within organisations. This tool, along with other similar tools such as AuKill, represent a growing trend of EDR-neutralizing tools used by cybercriminals to compromise security systems and conduct unimpeded attacks. To protect against such tools, Sophos recommends enabling tamper protection, practicing strong Windows security hygiene, and keeping systems updated.