Threat actors abuse Microsoft’s mavinject.exe to inject malicious DLLs into trusted processes, evading detection in stealthy APT campaigns.

New CrossPUSH & CrossSXG attacks exploit HTTP/2 and SXG to bypass Same-Origin Policy, enabling XSS and cookie manipulation.

Group-IB exposes 620+ malicious digitally signed drivers and 80+ compromised certificates since 2020, fueling stealthy Windows kernel attacks and bypassing security defenses.

ASEC exposed a SteamCleaner malware clone signed with a valid certificate. It installs a Node.js RCE backdoor via InnoSetup, evades sandboxes, and is suspected of running Proxyware for profit.

Acronis exposed TamperedChef, a global campaign using US shell companies to sign trojanized apps. The malware deploys a stealthy, obfuscated JavaScript backdoor via a scheduled task for long-term persistence.

Kerberos is designed to make authentication in Active Directory seamless and secure. In practice, however, a single weak service account…

To complete this Room The Only thing we need is a Message and a Python Script You can Type `Hello` as Message Content And Here’s the Script

Overview