A malicious LastPass Authenticator installer distributed via GitHub employs a legitimately signed Microsoft kernel driver to terminate endpoint detection and response (EDR) agents and antivirus software before deploying a credential stealing payload, initially evading all VirusTotal detections.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →