In-the-wild attacks tamper with built-in security tool to suppress infection warnings.