Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

Attackers are disguising themselves as representatives of at least 40 companies to spread malware. They are using fake LastPass installers to deploy the malware, which includes a kernel-level EDR killer and an infostealer called Rapuncel. The attackers are able to disable 145 different security products, allowing the malware to be deployed. This tactic enables the attackers to steal sensitive information from compromised systems. The use of fake installers and kernel-level EDR killers makes the malware particularly difficult to detect and remove. The attackers' ability to impersonate multiple companies adds to the complexity of the threat.