Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1113929" data-attributes="member: 32260">Yes, the method is generally classified as <a href="https://attack.mitre.org/techniques/T1562/" target="_blank">Impair Defenses, Technique T1562 - Enterprise | MITRE ATT&amp;CK®</a> . However, the attackers rarely used Windows built-in features to impair preventative defenses.Furthermore, that method has been well-known for many years in medicine. It is called an allergy. I inserted the &quot;allergen&quot; into the Windows system, and the system reaction invalidated some functionality of AVs. Some allergies can kill, and we can translate this to killing AV.[URL unfurl=&quot;true&quot;]https://en.wikipedia.org/wiki/Allergy[/URL]Using Windows built-in security for malicious actions is also similar to the HIV ( human immunodeficiency viruses). I hope that AV vendors are better prepared to prevent the &quot;disease&quot;.</blockquote>

[QUOTE="Andy Ful, post: 1113929, member: 32260"] Yes, the method is generally classified as [URL="https://attack.mitre.org/techniques/T1562/"]Impair Defenses, Technique T1562 - Enterprise | MITRE ATT&CK®[/URL] . However, the attackers rarely used Windows built-in features to impair preventative defenses. Furthermore, that method has been well-known for many years in medicine. It is called an allergy. I inserted the "allergen" into the Windows system, and the system reaction invalidated some functionality of AVs. Some allergies can kill, and we can translate this to killing AV. [URL unfurl="true"]https://en.wikipedia.org/wiki/Allergy[/URL] Using Windows built-in security for malicious actions is also similar to the HIV ( [B]human immunodeficiency viruses[/B]). I hope that AV vendors are better prepared to prevent the "disease". [/QUOTE]

Verification