Less SmartScreen More Caffeine – ClickOnce AbUse for Trusted Code Execution | WWHF Deadwood 2022

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

Initial access payloads have historically had limited methods that work seamlessly in phishing campaigns and can maintain a level of evasion. This payload category has been dominated by Microsoft Office types, but as recent news from Microsoft has shown, the lifespan of even this technique is shortening. As greatly overlooked vehicle for initial access, ClickOnce is very versatile and has …

access campaigns clickonce evasion initial access microsoft microsoft office office payload phishing types vehicle work