New DefenderWrite Tool Let Attackers Inject Malicious DLLs into AV Executable Folders
A new tool called DefenderWrite exploits whitelisted Windows programs to bypass protections and write arbitrary files into antivirus executable folders, potentially enabling malware persistence and…