SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group Silver Fox has been observed targeting a Japanese industrial manufacturing organization with a sophisticated attack chain that leverages…
Tag: DLL side-loading
Zeon Corporation: Japanese Chemical and Software Company
Zeon Corporation is a Japanese company involved in chemicals and software. Its legitimate binaries ConvertToPDF.exe and PDFDirect.exe were abused in DLL side-loading…
ConvertToPDF.exe: Legitimate Zeon Binary Abused for DLL Side-Loading
ConvertToPDF.exe is a legitimate executable from Zeon Corporation that was abused by Silver Fox to sideload the malicious PDFCORE8.dll in their attack…
PDFDirect.exe: Legitimate Zeon Binary Abused for DLL Side-Loading
PDFDirect.exe is a legitimate executable from Zeon Corporation that was abused by Silver Fox to sideload the malicious PDFCORE8.dll in their attack…
Nimbus Manticore Deploys NightLedger Backdoor and WebSocket Tunnelers in Multi-Region Espionage Campaign
Iranian state-backed hacking group Nimbus Manticore (also known as GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been linked to…
Modern SOCs Need Multi-Layered Network Detections to Counter AI-Powered Attacks
Modern Security Operations Centers (SOCs) face an escalating threat landscape where AI-equipped attackers, such as those using the autonomous exploit engine Claude…
Iran-Linked Hackers Deploy New Cavern C2 Framework in Targeted Attacks on Israeli Organizations
Iranian state-sponsored hackers affiliated with the Ministry of Intelligence and Security (MOIS) have been using a previously undocumented modular command-and-control (C2) framework…
SysAid: IT Service Management Platform Abused in Cavern Attack Chain
SysAid's software update feature was abused by Cavern Manticore to initiate a DLL side-loading attack leading to Cavern Agent execution.
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
Bitdefender ConnectAgent: Security Component Abused for DLL Side-Loading
Bitdefender ConnectAgent's BDSubWiz.exe was used by Umbrij malware for DLL side-loading. ConnectAgent is a component of Bitdefender's endpoint security solutions.