A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
Bitdefender ConnectAgent's BDSubWiz.exe was used by Umbrij malware for DLL side-loading. ConnectAgent is a component of Bitdefender's endpoint security solutions.
Google Desktop Search, a discontinued application, was abused by Umbrij malware for DLL side-loading. The tool was originally used for indexing files…
A new malware strain named Umbrij, attributed to the advanced persistent threat (APT) group ToddyCat, is abusing OAuth 2.0 tokens to gain…
Umbrij is a .NET-based malware attributed to the ToddyCat APT group, designed to steal OAuth tokens from Gmail accounts. It exploits Chromium-based…
Microsoft Visual Studio's VSTestVideoRecorder.exe was abused by Umbrij malware for DLL side-loading. Visual Studio is an integrated development environment from Microsoft.
Unknown threat actors are leveraging the ScreenConnect remote access tool to deploy and execute AsyncRAT as part of a massive, multi-domain, multi-language…
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
SharkLoader is a previously undocumented malware family used as a loader to deploy Cobalt Strike Beacon. It employs Perfect DLL Hijacking to…
CVE-2021-27076 is a remote code execution vulnerability in Microsoft SharePoint. In StrikeShark, it was used to trigger a DLL side-loading chain to…