Windows operating system comes with both Kernel and User modes, but not everyone knows the difference between both. In fact, most users have no idea these modes exist, but yet they’ve used them before ...
The China-linked Mustang Panda APT has been using a kernel-mode rootkit in attacks leading to ToneShell backdoor deployments.