home.social

#threatresearch — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #threatresearch, aggregated by home.social.

  1. Nine files, two payloads: a Silver Fox sideloader in an open directory

    An open HFS server was serving a Silver Fox DLL-sideloading kit: a Microsoft-signed SPDDUMP.EXE loads a malicious mspdb140.dll, which starts a downloader and a keylogging, clipboard-stealing implant. Nine payload files reduce to two, and one 2 KB loader stub marks both stages.

    whack.sh/news/silver-fox-spddu

    #threatresearch #silverfox #dllsideloading #opendirectory

  2. Nine files, two payloads: a Silver Fox sideloader in an open directory

    An open HFS server was serving a Silver Fox DLL-sideloading kit: a Microsoft-signed SPDDUMP.EXE loads a malicious mspdb140.dll, which starts a downloader and a keylogging, clipboard-stealing implant. Nine payload files reduce to two, and one 2 KB loader stub marks both stages.

    whack.sh/news/silver-fox-spddu

    #threatresearch #silverfox #dllsideloading #opendirectory

  3. Nine files, two payloads: a Silver Fox sideloader in an open directory

    An open HFS server was serving a Silver Fox DLL-sideloading kit: a Microsoft-signed SPDDUMP.EXE loads a malicious mspdb140.dll, which starts a downloader and a keylogging, clipboard-stealing implant. Nine payload files reduce to two, and one 2 KB loader stub marks both stages.

    whack.sh/news/silver-fox-spddu

    #threatresearch #silverfox #dllsideloading #opendirectory