Bleeping Computer

QBot phishing uses Windows Calculator DLL hijacking to infect devices

The operators of the QBot malware have been using a DLL hijacking flaw in Windows Calculator to infect computers, which also helps evade detection by security software. DLL hijacking is a common ...
Bleeping Computer

QBot phishing abuses Windows Control Panel EXE to infect devices

Phishing emails distributing the QBot malware are using a DLL hijacking flaw in the Windows 10 Control Panel to infect computers, likely as an attempt to evade detection by security software. DLL ...
Dark Reading

DPRK Exploits 2 MITRE Sub-Techniques: Phantom DLL Hijacking, TCC Abuse

This month, MITRE will be adding two sub-techniques to its ATT&CK database that have been widely exploited by North Korean threat actors. The first, not entirely new, sub-technique involves ...
MacTech

As macOS malware grows in popularity, Windows exploits remain another vector of choice for threat actors

As the macOS desktop user base continues to grow year over year, and Windows remains a mainstay, adversaries are growing more adept in their strategies to become more versatile cross-platform. As ...
Computerworld

IE users most at risk from DLL hijacking attacks

Users of Microsoft’s Internet Explorer (IE) are more vulnerable to rogue DLL attacks than people who use rival browsers such as Mozilla’s Firefox or Google’s Chrome, a security researcher said today.
Dark Reading

Firefox Patches DLL Load Hijacking Vulnerability

On Tuesday, Mozilla released two new versions of Firefox -- 3.6.9 and 3.5.12 -- to patch 15 vulnerabilities, 10 of which it rated as being "critical." Most notably, Firefox is now immune to the DLL ...
TechSpot

Security researcher uses exploits in ransomware to block encryption

In brief: Malware works by exploiting vulnerabilities in software and hardware. However, malware itself is also software, and inevitably has its own vulnerabilities. One security researcher has ...