‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload
‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload
11 March 2026
The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration.