A new antivirus-killing ransomware has been announced that starts off by killing all known commercial antivirus products. Name: EDRKillShifter Is Norton aware of this? Is there a patch for it?
Detailed description:
Product & version number:
OS details:
What is the error message you are seeing?
If you have any supporting screenshots, please add them:
That is being discussed here on Bleeping Computer site. I have tagged a Gen digital / Norton admin for possible clarification:
CVE-2023-44976 was assigned yet not published until 03/05/2024 and currently is awaiting analysis:
https://nvd.nist.gov/vuln/detail/CVE-2023-49976
The first variant POC ( proof of concept ) doesn’t list Norton but does several other A/V providers:
The second POC appears to be targeted toward Windows Defender and its variants on Windows OS:
@Gayathri_R Please elaborate what the Gen/Norton teams are saying about this if possible.
SA