RedDriver is one of the many malicious drivers that were using forged WHQL driver signatures which were recently banned by Microsoft. However, this driver never BSOD'd during analysis.
Novel RedDriver tool used in attacks against Chinese Microsoft users Chinese-speaking Microsoft users have been subjected to attacks involving the RedDriver tool that enables browser traffic takeovers, according to The Record, a news site by cybersecurity firm Recorded Future.