Lazarus Group Exploits Windows Zero-Day CVE-2026-68820 in Operation Dream Job Attacks
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched Microsoft Windows…
Tag: DLL side-loading
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Fortinet FortiGuard Labs has disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool popular among overseas Chinese…
Chinese-Speaking Hackers Target Central Asian Governments with OctLurk and SilkLurk Backdoors
A suspected Chinese-speaking threat actor has been conducting a series of cyber attacks against government organizations in Central Asia since January 2025.…
SilkLurk Backdoor: DLL Side-Loading and Plugin Injection
SilkLurk is a backdoor deployed via DLL side-loading. It connects to a C2 server, collects victim information, and can execute commands, update…
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers at Blackpoint Cyber have uncovered a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as…
HollowFrame: A Go-Based Modular Loader and Persistence Framework
HollowFrame is a previously undocumented Go-based loader framework used in a spear-phishing attack targeting a law firm. It is launched via DLL…
SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group Silver Fox has been observed targeting a Japanese industrial manufacturing organization with a sophisticated attack chain that leverages…
Zeon Corporation: Japanese Chemical and Software Company
Zeon Corporation is a Japanese company involved in chemicals and software. Its legitimate binaries ConvertToPDF.exe and PDFDirect.exe were abused in DLL side-loading…
ConvertToPDF.exe: Legitimate Zeon Binary Abused for DLL Side-Loading
ConvertToPDF.exe is a legitimate executable from Zeon Corporation that was abused by Silver Fox to sideload the malicious PDFCORE8.dll in their attack…
PDFDirect.exe: Legitimate Zeon Binary Abused for DLL Side-Loading
PDFDirect.exe is a legitimate executable from Zeon Corporation that was abused by Silver Fox to sideload the malicious PDFCORE8.dll in their attack…