DLL Sideloading

Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

• Cyber Security
• Malware

Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

Do Son May 14, 2025 0

Swan Vector cyber-espionage campaign uses sophisticated malware to target institutions in Japan and Taiwan. Learn how they evade detection and steal data

Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics

• Malware

Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics

Do Son May 1, 2025 0

Sophos researchers detail a complex campaign using Cobalt Strike, DLL sideloading, and clever techniques like expired certificates

Lumma Stealer: Unpacking Its Evasive Tactics and Complex Infection Chains

• Malware

Lumma Stealer: Unpacking Its Evasive Tactics and Complex Infection Chains

Do Son April 23, 2025 0

A deep dive into Lumma Stealer's sophisticated techniques: from fake CAPTCHAs to complex infection chains designed to evade detection and steal sensitive data.

Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign

• Cyber Security

Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign

Do Son April 21, 2025 0

The Billbug group targeted Southeast Asian organizations using advanced tools & DLL sideloading. This report details their sophisticated espionage campaign.

CVE-2025-21420: Windows Disk Cleanup Tool Flaw Exploited to Gain SYSTEM Privileges, PoC Released

• Vulnerability
• Windows

CVE-2025-21420: Windows Disk Cleanup Tool Flaw Exploited to Gain SYSTEM Privileges, PoC Released

Do Son February 19, 2025 0

Learn about CVE-2025-21420, a critical vulnerability in the Windows Disk Cleanup Tool that could allow SYSTEM privilege escalation.

Cracked Software: A Gateway to Malware and Data Theft

• Malware

Cracked Software: A Gateway to Malware and Data Theft

Do Son January 10, 2025 0

Beware of cracked software and fake installers. Discover how cybercriminals exploit user trust and spread malicious payloads.

UAC-0184’s XWorm RAT Campaign Targets Ukraine with Python and DLL Sideloading

• Cyber Security
• Malware

UAC-0184’s XWorm RAT Campaign Targets Ukraine with Python and DLL Sideloading

Do Son June 27, 2024 0

UAC-0184, leverages sophisticated techniques like DLL sideloading and the use of Python-related files to deliver the notorious XWorm RAT

ClearFake Campaign Employs Novel Social Engineering Tactic to Deliver LummaC2 Infostealer

• Cyber Security
• Malware

ClearFake Campaign Employs Novel Social Engineering Tactic to Deliver LummaC2 Infostealer

Do Son June 3, 2024 0

The ReliaQuest Threat Research Team has unveiled a new execution technique used in the ongoing ClearFake campaign

Infamous WarzoneRAT Malware Returns, Deploys Sophisticated Multi-Stage Attacks

• Malware

Infamous WarzoneRAT Malware Returns, Deploys Sophisticated Multi-Stage Attacks

Do Son March 27, 2024 0

Once WarzoneRAT has infiltrated a system, it employs a sophisticated arsenal of tools to gain a foothold and evade detection

Python Developers Beware: Attackers Sneak Malware into Popular Package Manager

• Malware

Python Developers Beware: Attackers Sneak Malware into Popular Package Manager

Do Son February 21, 2024 0

The attackers hid malicious code in packages designed to mimic legitimate ones, using a technique called DLL sideloading to slip past security defenses

WinSCP SEO Poisoning Campaign: Hackers Exploit Popular Software for Malware Attacks

• Cyber Security
• Malware

WinSCP SEO Poisoning Campaign: Hackers Exploit Popular Software for Malware Attacks

Do Son November 20, 2023 0

DLL Sideloading is used to run a malicious DLL library, while the genuine WinSCP installer serves as a smokescreen for the deceit.

Quasar RAT: Stealthy Data Extraction via DLL Sideloading

• Malware

Quasar RAT: Stealthy Data Extraction via DLL Sideloading

Do Son October 23, 2023 0

The open-source RAT, Quasar RAT, employs the DLL Sideloading technique to discreetly extract data from infected Windows-based devices