Qilin Ransomware’s EDR Killer DLL – How Attackers Are Subverting Defenses

About this episode

The episode discusses how Qilin ransomware uses a malicious DLL to disable EDR tools before encryption.

Got a question or comment? Message us here! Qilin ransomware is deploying a malicious DLL to disable EDR tools before encryption begins. In this #SOCBrief, we break down how the attack works, what to look for, and how defenders can respond. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

People in this episode

Host: Alias Cybersecurity

Topics covered

• ransomware
• cybersecurity
• EDR tools
• malware
• defense strategies

Keywords

• Qilin ransomware
• EDR
• malicious DLL
• cyber attack
• defense response

Mentioned in this episode

Organizations: Qilin ransomware

More episodes of Secure AF - A Cybersecurity Podcast

• The SOC Brief Turns One 🎂 Insights, Stories & Lessons Learned · June 10, 2026 · 14 min
• Kali365 Phishing-as-a-Service: FBI Warns of New M365 Credential Theft Tool · June 3, 2026 · 6 min
• Incident Response 101: What to Do When You’re Under Attack · June 2, 2026 · 38 min
• First Known AI-Powered Zero-Day Exploit: What SOCs Need to Know 🤖 · May 27, 2026 · 5 min
• ShinyHunters Breach of Instructure Canvas LMS 📚✏️: Lessons for SOCs on Third-Party Vendor Risks · May 20, 2026 · 5 min
• Canvas Breach Breakdown: What 9,000+ Outages Teach Us About SaaS Risk · May 19, 2026 · 55 min