Hackers Disable Defender, Sysmon, and WAF Before Dumping Credentials With Mimikatz

Hackers have found a new way to blind security teams before stealing passwords, and the technique is as thorough as it is alarming. A threat actor recently disabled Microsoft Defender, killed the Sysmon logging tool, and tore down a web application firewall, all before deploying Mimikatz to harvest credentials. The campaign shows how far attackers […]

The post Hackers Disable Defender, Sysmon, and WAF Before Dumping Credentials With Mimikatz appeared first on Cyber Security News.