Hackers exploiting Windows defender weakness to bypass malware detection

Weakness in Windows Defender antivirus is allowing hackers to plant malware.

The weakness of windows defender allows hackers to locate locations excluded from scanning and hence, allowing the hackers to plant new malware at these locations.

Microsoft Defender lets users add locations (local or on the network) on their systems that should be excluded from malware scans. Security researchers discovered that the list of locations excluded from Microsoft Defender scanning is unprotected and any local user can access it.

Local user can query the registry to find out about the paths that the defender is not allowed to scan. One can also access the Group Policy settings which allows the exclusion for multiple computers.

NPAV recommends users to keep themselves updated for the applications and cyber security tool updates. If there are critical vulnerabilities reported for a tool or application, refrain from using it. Install NPAV on your devices to avail dedicated world-class cyber security products and solutions.

Use NPAV and join us on a mission to secure the cyber world.