APT24 erweitert Arsenal: Von Watering-Hole zu Multi-Vektor-Angriffen auf Taiwan

Wie die Google Threat Intelligence Group (GTIG) in einer aktuellen Analyse aufdeckt, setzt die Hackergruppe seit drei Jahren den hochgradig verschleierten Downloader BADAUDIO ein – und hat dabei ihre Taktik von breit gestreuten Watering-Hole-Angriffen auf komplexe Multi-Vektor-Operationen erwei..

https://www.all-about-security.de/apt24-erweitert-arsenal-von-watering-hole-zu-multi-vektor-angriffen-auf-taiwan/

#cybersecurity #cyberattack #APT #APT24 #GoogleThreatIntelligence #hackers #DLLHijacking

I published my WriteUp of Analysis box from @hackthebox_eu

👇👇👇

https://v0lk3n.github.io/writeup/HackTheBox/Box/Analysis/HTB-Analysis_WriteUp

I hope that you will like it :)

#HTB #LDAPInjection #DLLHijacking #Windows #Pentest #CyberSecurity #HackTheBox

Demystifying DLL Hijacking Understanding the Intricate World of Dynamic Link Library Attacks: https://www.binarydefense.com/resources/blog/demystifying-dll-hijacking-understanding-the-intricate-world-of-dynamic-link-library-attacks/

#dllhijacking

Great reference for #DLLHijacking that I keep forgetting about: https://hijacklibs.net/

It is a similar concept to https://lolbas-project.github.io and https://gtfobins.github.io/

I wrote a little script to parse and extend the Sigma rules from hijacklibs dll side loading archive.

Feel free to modify this to include your PySigma tail content so it can work in your SIEM

https://github.com/joshnck/Sigma_Rules/blob/main/scripts/get-hijacklibs-sigma-rules.ps1

#sigma #dllhijacking #blueteam #threathunting #thrunting

I just pocketed: UAC Bypass in System Reset Binary via DLL Hijacking

https://www.activecyber.us/activelabs/uac-bypass-in-system-reset-binary-via-dll-hijacking

#dllhijacking #security #tutorial #windows