Hackers Target Chinese Gamers With Microsoft-Signed RootkitBy rooter / July 13, 2023 Kernel mode driver can download second-stage payload directly to memory, allowing threat actors to evade endpoint detection and response tools.