Do Son Splunk uncovers XWorm's evolution: a modular RAT now delivering LockBit ransomware. It uses flexible delivery, AMSI/ETW bypasses, and process injection to evade detection.
DLL side-loading
A technical analysis of the More_Eggs malware, detailing its use of ieuinit.exe abuse, DLL side-loading, and polymorphic JavaScript.
Unveiling the LummApp malware campaign: a sophisticated threat employing DLL side-loading and browser extension-based attacks to exfiltrate sensitive data.
Explore the TIDRONE threat actor and their cyberattacks on Korean companies. Find out how they exploit ERP software and deploy malware.
Discover GOSAR backdoor, a new Golang-based malware variant that rewrites the QUASAR RAT. Learn about its cross-platform capabilities and reduced detection rates
The campaign utilizes a complex DLL side-loading technique involving legitimate files from the IObit anti-malware solution to execute malicious payloads