Dropping Elephant Hackers Use China-Themed Loader Chain to Deploy In-Memory RAT

A sophisticated campaign by the actor tracked as “Dropping Elephant” that uses a China-themed decoy document and a heavily reworked, in-memory remote access trojan (RAT). The intrusion chain combines classic living-off-the-land techniques with modern in-memory execution: an LNK shortcut spawns an obfuscated PowerShell downloader, which stages artifacts in C:\Users\Public, then leverages DLL side‑loading. A legitimate […]

The post .