'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates

Summary

A new proof-of-concept technique called 'BigDiskBuster' has been demonstrated that can create a silent gap in virus detection by preventing Microsoft Defender from updating its definitions. This method doesn't require exploits and allows the antivirus service to appear to be running normally, making it difficult to detect the compromise.

Entities