Filter
Exclude
Time range
-
Near
Genians Security Center uncovers an APT37 campaign that used social networking as an initial access vector. Two Facebook accounts set to North Korea-linked locations were used to screen targets, build trust, and move conversations to Messenger. genians.co.kr/en/blog/threat…
1
93
Attackers are ditching disk-based payloads. Portable Executable (PE) Injection lets them execute malware entirely in memory, evading EDR & leaving no trace. 🔴 Used in SystemBC attacks 🔴 Hijacks trusted processes 🔴 Bypasses ASLR & security controls Read more: hubs.li/Q03b1cNX0 #CyberSecurity #PEInjection #MemoryAttacks
1
2
110
Federal authorities warn #MedusaLocker is targeting #RDP vulnerabilities. The #ransomware uses a batch file to execute a PowerShell script, called invoke-Reflective PEInjection. #CyberSecurity #InfoSec #malware #RaaS CVSoci.al/unkcnUUy

4
3
Dridex’s Bag of Tricks: An Analysis of its Masquerading and Code Injection Techniques ... by Ratnesh Pandey #atombombing #codeinjection #dllorderhijacking #dridex #peinjection securityboulevard.com/2019/0…

2
1