← Back to feed
Threat Actors & CampaignsEmerging1 sourceMar 19, 2026 · 14:00via Huntress Blog

How a Tax Search Leads to Kernel-Mode AV/EDR Kill

Brief

Huntress uncovers a tax-themed malvertising campaign using Google Ads, dual cloaking, rogue ScreenConnect, and an undocumented Huawei driver to kill AV/EDR.

Read more on Huntress Blog