BlackSanta is a malware module that kills EDR and AV at the kernel level prior to unleashing the malware’s final purpose.

For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.

That's it. Whenever there's a new version you simply run the command and you can enjoy it. Remember, that you may need to close, reopen the PowerShell session if you have already used the module ...

Disclaimer: This project is in no way "official", endorsed or supported by Spotify, or affiliated with Spotify in any way. All code is provided as-is, with no warranty or guarantees. The first time ...