FLAW IN ESET SECURITY SOFTWARE USED TO SPREAD MALWARE FROM TODDYCAT GROUP

Summary from the TLDR InfoSec newsletter

A threat actor known as ToddyCat has exploited a vulnerability in ESET's antivirus scanner. The vulnerability could allow privileged attackers to plant a malicious DLL and execute it through the antivirus scanner. The attackers in this campaign are using a tool dubbed TCDSB, which seems to be an extension of EDRSandBlast, to alter key components of the OS and disable alerts.