Post
Capstone Technologies Group
captechgroup.com
did:plc:hbavx6zwlutg237axyv7mrfe
Attackers are loading a legitimate signed OPSWAT AppRemover driver (CVE-2026-36425) to kill Defender from the kernel, then dropping Spark RAT on a host with no working sensors. #infosec #cybersecurity
https://captechgroup.com/threat-intelligence-center/spark-rat-campaign-abuses-opswat-ardrvsys-driver-t-9d1652?utm_source=bluesky&utm_medium=social&utm_campaign=threat_intel&utm_content=spark-rat-campaign-abuses-opswat-ardrv-sys-driver-to-kill-security-tools
2026-08-27T16:46:26.782Z