Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Researcher Chaotic Eclipse published BigDiskBuster, a PoC that blocks Microsoft Defender signature and platform updates.
Security researcher Chaotic Eclipse, who says he is Abdelhamid Naceri, released BigDiskBuster, a proof-of-concept that can stop Microsoft Defender from receiving platform and signature updates. He says it works on supported Windows versions but the PoC is buggy. The same researcher also published privilege-escalation PoCs HardBreacher for Kaspersky Endpoint Security, PrettyPrague for Avast, and FalconFlank for CrowdStrike Falcon.
- BigDiskBuster aims to block Defender platform and signature updates
- Researcher says the PoC is buggy and needs rewriting
- Separate PoCs target Kaspersky, Avast, and CrowdStrike Falcon privilege escalation
- No CVE numbers were published with these claims
- ATT&CK
- T1562.001 Impair Defenses: Disable or Modify ToolsT1068 Exploitation for Privilege EscalationT1003.002 OS Credential Dumping: Security Account Manager
- Organizations
- Microsoft
From the original article
3 min read at securityaffairs.com
The researcher Chaotic Eclipse released BigDiskBuster, a PoC exploit for a Windows Defender Update DoS Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting Microsoft Defender. The researcher named the exploit BigDiskBuster, it triggers a Denial of Service Vulnerability in Windows Defender Update.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.