Kernel-level rootkits aren’t uncommon, but it takes sophisticated knowledge and a deft touch to build one that works well. And this one worked very well.6
Footnote suggests that the reason the virus was detected was the repeated crashes due to incompatibility with this particular organization’s antivirus software (virus-blokada) with the malware-containing driver. And that the creators had likely tested extensively with other more widespread antivirus. But even in cyberwarfare, testing is both critical and impossible to do comprehensively.
