Description
EDRKiller is a trojan that attempts to terminate and evade endpoint detection and response (EDR) security software on infected systems.
Stats
- First seen
- September 2025
- Last seen
- October 2026
Also known as
EDRKiller
Alert name variants
| Alert Name |
|---|
| Gen:Variant.EDRKiller.11 |
| Gen:Variant.EDRKiller.14 |
| Gen:Variant.EDRKiller.15 |
| Gen:Variant.EDRKiller.16 |
| Gen:Variant.EDRKiller.20 |
| Gen:Variant.EDRKiller.22 |
| Gen:Variant.EDRKiller.24 |
| Gen:Variant.EDRKiller.25 |
| Gen:Variant.EDRKiller.27 |
| Gen:Variant.EDRKiller.28 |
Related IPS Signatures
| Signature Name |
|---|
| MALWARE-OTHER Win.Trojan.EDRKiller download attempt |