⚠️ A defense evasion tool called ExEngine is being sold as a service, marketed as an AV/EDR kille...

Summary

ExEngine is a defense evasion tool being marketed and sold as a service that targets mainstream antivirus and EDR solutions including Windows Defender, Malwarebytes, Bitdefender, and Avast. The tool combines AV termination capabilities with a Ring-3 rootkit and UAC bypass functionality to evade security controls. This represents a growing threat landscape where adversaries purchase pre-built evasion capabilities to support broader attack campaigns.

Indicators of Compromise

• malware — ExEngine

Entities