Skip to content
MalwareWiki

Malware

NimBlackout

According to its author, NimBlackout is an adaptation of the @Blackout project originally developed in C++ by @ZeroMemoryEx, which consists of removing AV/EDRs using the gmer (BYOVD) driver.

NimBlackout is a Windows malware family.

Background

Per its author, NimBlackout is a Nim port of the @Blackout project that @ZeroMemoryEx first wrote in C++, designed to kill AV/EDR products by abusing the gmer (BYOVD) driver. The author created it to learn how BYOVD attacks function and to deliver a working proof of concept written in Nim.

Source: Malpedia (Fraunhofer FKIE).