Windows 11 UAC Bypass in Modern Malware

In this article, we’ve prepared a brief overview of UAC bypass methods in Windows 11 that are used in modern malware and provided examples of their implementation in active threats. We’ll cover: 

• Exploitation of COM interfaces with the Auto-Elevate property 


• Modification of the ms-settings registry branch 


• Infinite UAC Prompt Loop (social engineering) 

Let’s investigate these methods. 

Exploitation of COM Interfaces with the Auto-Elevate Property 

First, let’s quickly define COM.  

COM (Component Object Model) refers to objects containing data and methods …

active threats article auto bypass com elevate engineering examples exploitation implementation loop malware modern malware modification prompt property registry settings social social engineering threats uac uac bypass windows windows 11