Rapuncel infostealer uses Microsoft-signed driver to disable 145 security processes
AI Summary- Rapuncel uses Alinubx.sys to disable antivirus and endpoint security before stealing credentials.
- 145 processes were targeted, while VirusTotal recorded zero detections across 72 engines.
- LastPass and Delphos Labs disclosed the campaign on September 17, 2026.