Tag: kernel level rootkit

HoneyMyte APT Group Upgrades CoolClient Backdoor with Kernel-Level Rootkit

Meet the upgraded CoolClient Backdoor, now packing a kernel-level rootkit courtesy of the sneaky HoneyMyte APT Group - and it's hiding in plain sight with a legit digital signature. This clever malware uses a Windows service and a kernel-mode driver to evade detection.