Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits

EDRs have a super power. They can delete any file. This session will show how we used their own power against them and managed to create the next-gen wiper that runs with the permissions of an unprivileged user yet has the ability to wipe almost any file on the system, including system files. It does all that without implementing code that actually touches target files by itself, making it undetectable.