Summary:
Recently hackers are seen using a DLL sideloading technique to load malware into the Memory of a compromised system by abusing the Windows Problem error Reporting tool (WerFault.exe) for Windows. It allows the system to track and report errors related to the operating system or applications. The use of this Windows executable is to infect devices without alerting the compromised system by launching the malware using a legitimate Windows executable. In this campaign to infect the target, phishing mails containing ISO files were used.[/subscribe_to_unlock_form]
Summary:
Recently hackers are seen using a DLL sideloading technique to load malware into the Memory of a compromised system by abusing the Windows Problem error Reporting tool (WerFault.exe) for Windows. It allows the system to track and report errors related to the operating system or applications. The use of this Windows executable is to infect devices without alerting the compromised system by launching the malware using a legitimate Windows executable. In this campaign to infect the target, phishing mails containing ISO files were used.[emaillocker id="1283"]
Threat Profile:
References:
The following reports contain further technical details:
[/emaillocker]