Rapuncel Infostealer Uses Signed Kernel Driver to Kill 145 Security Tools and Steal Credentials

A malware campaign tracked as Rapuncel is abusing a Microsoft-attested kernel driver to disable endpoint protections before stealing credentials, cryptocurrency wallet data, messaging tokens, and sensitive files from infected Windows devices. Researchers from the LastPass Threat Intelligence, Mitigation, and Escalation (TIME) Team and Delphos Labs identified the operation after uncovering fraudulent GitHub pages impersonating LastPass Authenticator . The campaign used…

Diamond Model