Dragon Breath APT Deploys RoningLoader, Using Kernel Driver and PPL Abuse to Disable Windows Defender Cyber Security Malware Dragon Breath APT Deploys RoningLoader, Using Kernel Driver and PPL Abuse to Disable Windows Defender Do Son November 18, 2025 0 Elastic Security Labs has uncovered a highly sophisticated malware campaign led by the Dragon Breath APT group... Read More Read more about Dragon Breath APT Deploys RoningLoader, Using Kernel Driver and PPL Abuse to Disable Windows Defender