---
title: "Discussion on \"Rapuncel & Alinubx.sys: When a Microsoft-Signed Driver Becomes a Weapon Against 145 Security Products\" | Hashnode"
description: "Discussion on \"Rapuncel & Alinubx.sys: When a Microsoft-Signed Driver Becomes a Weapon Against 145 Security Products\". Overview\nOn September 17, 2026, the LastPass TIME team and Delphos Labs jointly published an analysis of an industrial-scale malware distribution campaign in which LastPass Authenticator was merely on"
url: "https://hashnode.com/posts/rapuncel-alinubx-sys-when-a-microsoft-signed-driver-becomes-a-weapon-against-145-security-products/6ab52b26677cd456794cf2eb"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Rapuncel & Alinubx.sys: When a Microsoft-Signed Driver Becomes a Weapon Against 145 Security Products](https://blog.fiscybersec.com/rapuncel-alinubx-sys-when-a-microsoft-signed-driver-becomes-a-weapon-against-145-security-products?utm_source=hashnode&utm_medium=feed)

Overview On September 17, 2026, the LastPass TIME team and Delphos Labs jointly published an analysis of an industrial-scale malware distribution campaign in which LastPass Authenticator was merely on

Sep 24 · 28 min read · blog.fiscybersec.com  
Read the article

-   [#rapuncel](https://hashnode.com/tag/rapuncel)
-   [#byovd](https://hashnode.com/tag/byovd)
-   [#edr-killer](https://hashnode.com/tag/edr-killer)
-   [#dll-side-loading](https://hashnode.com/tag/dll-side-loading)
-   [#code-signing-abuse](https://hashnode.com/tag/code-signing-abuse)
-   [#seo-poisoning](https://hashnode.com/tag/seo-poisoning)
-   [#maas](https://hashnode.com/tag/maas)

## Written by

[Đinh Văn Mạnh](https://hashnode.com/@PrismWalker)

@PrismWalker

  
[View profile](https://hashnode.com/@PrismWalker)

Go big or go home

## Responses

Markdown supported · ⌘↵ to post

No responses yet.