The researcher known online as Nightmare Eclipse, who has spent months publishing a rapid string of Windows and Microsoft Defender proof-of-concept exploits, has revealed his identity and released another Defender exploit.
Posting under the name Abdelhamid Naceri, the researcher announced a new PoC exploit called BigDiskBuster over the weekend.
According to the project’s GitHub page, BigDiskBuster is a proof of concept “similar to UnDefend” that prevents Windows Defender from completing its platform and signature updates.
He describes it as working on all currently supported Windows versions, while cautioning that the code is still buggy and needs further work.
SecurityWeek has reached out to Microsoft for comment on the BigDiskBuster exploit and will update this article if the company responds.
Nightmare Eclipse is Abdelhamid Naceri
About a week before releasing BigDiskBuster, Nightmare Eclipse, also known online as Chaotic Eclipse and MSNightmare, revealed that he is Abdelhamid Naceri, a researcher whose vulnerability discoveries were featured in the news half a decade ago.