Tag archive
Bronze Sandcastle has targeted organizations in Asia and Africa since mid-2025, using DLL sideloading to load malicious files through legitimate programs s
A signed Microsoft SPDDUMP.EXE sideloads a Silver Fox keylogger from an open HFS server. Nine payload files reduce to two, and a 2 KB stub marks…
WebDAV cmd stagers copy DeviceCensus.exe out of System32 to sideload dcntel.dll, a remote shell beaconing to port 9090.
Fake invoice scripts drop a DLL-sideloading backdoor behind decoys aimed at the Pakistan Navy, its suppliers and Pakistani government bodies.