# OSINT Post โ€” @thehackernews msg 8635 *Thursday, March 19, 2026 at 7:02 PM UTC โ€” Hamer Intelligence Services Desk* **Posted**: 2026-03-19T19:02:28.000Z (2mo ago) **Fetched**: 2026-03-21T21:32:24.228Z (2mo ago) **Views**: 6 **Media**: photo **Link**: https://t.me/thehackernews/8635 **Permalink**: https://hamerintel.com/data/posts/2464.md **Source**: https://hamerintel.com/sources --- ๐Ÿ”ฅ 54 EDR killers now use BYOVD, abusing 34 signed drivers to reach kernel access.Ransomware operators deploy them first to disable defenses, not evade detection inside the encryptor. Evasion has moved outโ€”into dedicated tools built to break EDR reliably.๐Ÿ”— Tools, tactics, and defensive gaps explained โ†’ https://thehackernews.com/2026/03/54-edr-killers-use-byovd-to-exploit-34.html