Dynamic Link Dazzle: Unveiling the Dark Side of DLLs

Fast facts:

• 
  

  DLL side-loading is a technique for executing malicious payloads inside a masqueraded DLL by leveraging a legitimate application’s execution process.

  
  


• 
  

  Groups and malware, such as Chinese APT groups and Darkgate malware, are wildly exploiting a zero-day DLL side-loading vulnerability in an Anti-KeyLogger Software KeyScrambler.exe.

  
  


• 
  

  KeyScrambler versions 3.18.0.0 and 3.17.0.4 are also vulnerable to this DLL side-loading vulnerability, with the possibility in earlier versions.

  
  

Security Research

Share This Story

The threat landscape in cybersecurity …

application apt apt groups chinese chinese apt dark darkgate darkgate malware dll dll side-loading dynamic exploiting facts fast keylogger link malicious malicious payloads malware payloads process software vulnerability zero-day