dll sideloading news
2 stories
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
A new cyber campaign, dubbed TerminalFix, has been reported to be actively targeting organizations through a sophisticated, multi-stage intrusion process. This campaign, identified as a variant of the previously known ClickFix operation, primarily relies on social engineering to initiate the attack chain, specifically by deceiving users into executing malicious PowerShell commands. The initial…
The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign
Security researchers have uncovered a widespread campaign that uses the legitimate remote access tool ScreenConnect, disguised as freeware, to compromise systems and deploy the AsyncRAT malware. The campaign involves numerous spoofed websites mimicking popular software downloads, which deliver malicious archives containing the ScreenConnect installer alongside other components.