Do Son A new campaign uses encrypted VBScript (.VBE) to deploy a fileless Masslogger infostealer, which hides in the Windows Registry to steal credentials and evade antivirus.
windows registry
Security researchers published the technical details and a PoC exploit code for CVE-2024-43452, a Windows Registry Elevation of Privilege flaw