New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools
A new infostealer named Rapuncel uses a Microsoft-signed kernel driver to kill 145 security tools and steal data via fake GitHub repositories.
78
Victim
LastPass
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 4, 2026
- Last mentionedSep 21, 2026
Timeline
3 articles · newest firstHackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords
Hackers are using a Microsoft-signed driver to disable 145 security tools and steal passwords via fake LastPass download pages on GitHub.
78
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex patched multiple undisclosed flaws in Media Server 1.43.3 and Desktop 1.115.0, urging all users to update immediately.
45
Related CVEs
by mentions- CVE-2020-574173%7.2Authenticated Deserialization RCE in Plex Media Server on Windows
- CVE-2025-34158<1%8.5Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the…
Appears with
- LastPassorganization · 2
- Microsoftvendor · 2
- Delphos Labsorganization · 2
- Cloudflareproduct · 2
- Cloudflarevendor · 2
- Henan Dafeng Softwareorganization · 2
- Alinubx.sysmalware · 2
- GitHubproduct · 2
- Rapuncelmalware · 2
- GitHubvendor · 2
- Discordproduct · 1
- Telegramproduct · 1
- Plex Media Serverproduct · 1
- Plexorganization · 1
- LastPassproduct · 1
- Windows Credential Managerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.