BlackBerry Japan Co., Ltd. BlackBerry discloses methods and damage mitigation measures for “Terminator EDR K iller” that claims to disable major antivirus products

BlackBerry Japan Co., Ltd.
BlackBerry reveals methods and mitigation measures for “Terminator EDR Killer,” which claims to disable major antivirus products ……
BlackBerry Japan Co., Ltd. (Headquarters: Minato-ku, Tokyo; Executive Officer and President: Tsutomu Yoshimoto; hereinafter referred to as BlackBerry) has announced that the Russian threat actor “Spyboy” is using antivirus (AV) products, EDR (endpoint detection/response), and XDR. (Advanced Detection/Response) We have released the methods and damage mitigation measures for the tool “Terminator EDR Killer” that claims to “disable” products, as well as the custom rules for CylanceOPTICS(R), to the public in Japan. BlackBerry’s Cylance(R)︎ AI-powered defense model successfully defends against this Terminator EDR Killer.
According to a post made by Spyboy on the Russian Anonymous
Marketplace (RAMP) in May of this year, this Terminator EDR Killer can be used to download 23 types of AV/ Disable EDR/XDR products and controls. Spyboy has released a demo video to back this up, and sells the Terminator EDR Killer at prices ranging from $300 to $3,000. The threat of Terminator EDR Killer and damage mitigation measures are explained in detail here <
https://blogs.blackberry.com/ja/jp/2023/11/blackberry-cylance-ai-prevents-terminator-edr-killer

Even against advanced threats like the Terminator EDR Killer, BlackBerry customers are protected by the Cylance® AI-driven defense model that prevents tools from running. Leveraging AI is a highly effective and efficient approach to cybersecurity, suited to the needs of modern organizations that need to protect themselves against constantly emerging threats, including Terminator EDR Killer. BlackBerry’s Threat Research team developed CylanceOPTICS(R) custom rules (now CylanceENDPOINT(TM)) to identify and mitigate techniques used by the Terminator tool. cylance-endpoint-security/cylance-ai About BlackBerry
BlackBerry provides intelligent security software and services for businesses and government agencies around the world. BlackBerry solutions protect over 500 million endpoints, including 235 million vehicles. Headquartered in Waterloo, Ontario, Canada, the company leverages AI and machine learning to deliver innovative solutions in the areas of cybersecurity, safety, and data privacy solutions. In addition, we are leading in key areas such as endpoint security management, encryption, and embedded systems. For more information, please visit BlackBerry.com.
BlackBerry, QNX, and related product trademark names and logos are registered trademarks or trademarks of BlackBerry Limited in the United States and other countries. Other company names, product names, etc. are generally trademarks or registered trademarks of their respective companies. BlackBerry is not responsible for any third party products or services.
Press contact information
BlackBerry Japan Co., Ltd. Public Relations Office
Phone: 03-4405-9537
Email: BlackBerryPR@next-pr.co.jp