Tag feed

#dll-sideloading

19 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

VNVũ Nhật Lâmblog.fiscybersec.comSep 29 · 9 min read

SilkParasite: Seven RATs, One Ecosystem, and Infrastructure Tracing Back to 2022

Summary SilkParasite is Bitdefender's label for an espionage cluster targeting government bodies and energy infrastructure across Central Asia, assessed as China-nexus at medium confidence. What stand

0

VNVũ Nhật Lâmblog.fiscybersec.comSep 16 · 19 min read

TerminalFix: Change One Dialog Box, and the Payload Jumps From an Infostealer to a Tunnel Into the Network

Summary Classic ClickFix directs victims to the Windows Run dialog. TerminalFix directs them to Windows Terminal or PowerShell. It sounds like a trivial detail. But the Run dialog accepts a single lin

0

LTLưu Tuấn Anhblog.fiscybersec.comSep 16 · 13 min read

TerminalFix Campaign Analysis: Risk of Active Directory Hijacking from Risky Terminal Operations

Executive Summary Recently, Microsoft Threat Intelligence published analysis of a wide-area attack campaign called TerminalFix — a dangerous evolution from the social engineering technique ClickFix. I

0

VNVũ Nhật Lâmblog.fiscybersec.comSep 3 · 19 min read

ValleyRAT and the Cost of a Valid Signature: When the Payload Has No Magic Bytes Left to Catch

Summary The victim extracts a ZIP archive and sees exactly one file: 07.30Document details.exe. That file is a genuine Overwolf Ltd executable with a valid digital signature, simply renamed. The other

0

ĐVĐinh Văn Mạnhblog.fiscybersec.comAug 31 · 29 min read

SLEEPWALKER: A Passive Backdoor That Wakes Up for Exactly One Packet, Carries Its Own Bytecode Language, and Hides Inside ESET Management Agent

Overview On August 24, 2026, independent malware researcher Dominik Reichel (former Palo Alto Networks Unit 42) published an exceptionally detailed analysis on his personal blog (r136a1.dev) of SLEEPW

0

VNVũ Nhật Lâmblog.fiscybersec.comAug 25 · 22 min read

HoneyMyte Takes CoolClient Into the Kernel: When a Rootkit Changes What Windows Lets You See

Summary CoolClient was already a fully capable espionage backdoor: keylogging, clipboard theft, credential harvesting, file management, system reconnaissance, and a plugin-based extension architecture

0

LTLưu Tuấn Anhblog.fiscybersec.comJun 29 · 10 min read

OnyxC2 Stealer – New threat turns browsers into data warehouses for cybercriminals

Campaign summary The arrival of OnyxC2 marks a notable step forward in the Malware-as-a-Service (MaaS) market. More than just a traditional infostealer, OnyxC2 is built as a complete platform for cybe

0

LTLưu Tuấn Anhblog.fiscybersec.comJun 29 · 17 min read

FishMonger Expands Spy Campaign: SprySOCKS Officially Attacks Windows

Campaign summary Recently, security researchers discovered a large-scale attack campaign targeting government organizations in Asia (Taiwan, Thailand, Pakistan) and Central America (Honduras), believe

0

VNVũ Nhật Lâmblog.fiscybersec.comJun 8 · 13 min read

Open Directory, Open Season: Inside Red Lamassu's JFMBackdoor

Executive Summary A misconfigured open directory did what years of stealth could not: it handed threat hunters the full toolkit of Red Lamassu (also tracked as Calypso and Bronze Medley), a China-nexu

0

VNVũ Nhật Lâmblog.fiscybersec.comMay 30 · 12 min read

FamousSparrow Targets Azerbaijani Energy Infrastructure: A Three-Wave Chinese APT Espionage Campaign

Executive Summary Between December 25, 2025 and late February 2026, the China-linked APT group FamousSparrow conducted three successive intrusion waves against an Azerbaijani oil and gas company — eac

0

#dll-sideloading

Search Hashnode

#dll-sideloading

Explore Hashnode

Trending tags this week

SilkParasite: Seven RATs, One Ecosystem, and Infrastructure Tracing Back to 2022

TerminalFix: Change One Dialog Box, and the Payload Jumps From an Infostealer to a Tunnel Into the Network

TerminalFix Campaign Analysis: Risk of Active Directory Hijacking from Risky Terminal Operations

ValleyRAT and the Cost of a Valid Signature: When the Payload Has No Magic Bytes Left to Catch

SLEEPWALKER: A Passive Backdoor That Wakes Up for Exactly One Packet, Carries Its Own Bytecode Language, and Hides Inside ESET Management Agent

HoneyMyte Takes CoolClient Into the Kernel: When a Rootkit Changes What Windows Lets You See

OnyxC2 Stealer – New threat turns browsers into data warehouses for cybercriminals

FishMonger Expands Spy Campaign: SprySOCKS Officially Attacks Windows

Open Directory, Open Season: Inside Red Lamassu's JFMBackdoor

FamousSparrow Targets Azerbaijani Energy Infrastructure: A Three-Wave Chinese APT Espionage Campaign