
The Akira ransomware, which has been surging in popularity lately, has also been used recently by hackers in conjunction with a legitimate Intel CPU tuning driver to disable Microsoft Defender.
As reported by Bleeping Computer, the attacks are registering the driver as a service in order to gain kernel-level access.