Skip to content
Threat Feed

Actor

Ryuk

1 brief RSS
high threat

Windows Defender Disabled via Registry Modification

An attacker modifies the Windows Registry key 'DisableAntiSpyware' to disable Windows Defender, a technique commonly associated with Ryuk ransomware to evade defenses.

Windows Defender +3 Ryuk defense-evasion registry-modification ransomware windows
2r 1t