Ransomware disables AV using Safe Mode: Avos Locker

[MarkNN]

Hello,

it seems that there is new technique to bypass the AntiVirus program:

Ransomware disables AV using Safe Mode: Avos Locker

Link

 

“https://www.bleepingcomputer.com/news/security/avoslocker-ransomware-reboots-in-safe-mode-to-bypass-security-tools/”

 

Kaspersky, do you know about this?

Are your programs prepared for such technique?

[Guest]

Interesting question, I have the same curiosity, if Kaspersky are prepared to this.

[Guest]

I’m surprised to not find any official Kaspersky related blog post about this.

Doing a research on the Internet find other antivirus company to talk about this dangerous attack. Don’t know if Kaspersky and some other product are able to block this or all security software can be vulnerable to this.