Hackers Target Gamers With Microsoft-Signed Rootkit

Kernel mode driver can download second-stage payload directly to memory, allowing threat actors to evade endpoint detection and response tools.

Stealthy Universal Rootkit Let Attacker Load Payload Directly

Microsoft admits signing a software driver loaded with rootkit malware

Hackers somehow got their rootkit a Microsoft-issued digital

Microsoft signed driver called Netfilter, turns out it contained

Online Gamers Beware: Hacker's Microsoft-Signed Rootkit Malware

Ransomware gang caught using Microsoft-signed drivers to hack

How to Protect Against Rootkit Malware Kernel-Level Attacks

Hackers Tricked Microsoft Into Certifying Malware That Could Spy

Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming

Digitally-Signed Rootkits are Back – A Look at FiveSys and Companions