NimBlackout

Malware type
exploit-kit
Profile updated
2026-07-07 15:13:42

Context

According to its author, NimBlackout is an adaptation of the @Blackout project originally developed in C++ by @ZeroMemoryEx, which consists of removing AV/EDRs using the gmer (BYOVD) driver. The main reason for this project was to understand how BYOVD attacks work, and then to provide a valid PoC developed in Nim.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Nim Blackout (report)
  • github.com — Nimblackout (report)

External references