A new XLoader infection chain. It hides the credential stealer inside an embedded LuaJIT interpreter. It moves it into another Windows process through shared-section injection. The campaign uses business-themed email lures. It also delivered Agent Tesla, Remcos and XWorm . The chain starts with order and payment emails. One Greek-language message... Weiterlesen: Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Cr…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware
A new XLoader infection chain. It hides the credential stealer inside an embedded LuaJIT interpreter. It moves it into another Windows process through…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald