BlackSanta is a malware module that kills EDR and AV at the kernel level prior to unleashing the malware’s final purpose.
The malware is described as an 'EDR killer', stopping security solutions and suppressing notifications.
For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.