Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Detect PlugX Trojan Masquerading as a Legitimate Windows Debugger Tool to Fly Under the Radar - SOC Prime

How IronNet's Behavioral Analytics Detect REvil and Conti Ransomware

Rundll32: The Infamous Proxy for Executing Malicious Code

Rundll32: The Infamous Proxy for Executing Malicious Code

Lemon Duck brings cryptocurrency miners back into the spotlight

Microsoft experts linked Raspberry Robin malware to Evil Corp

System Binary Proxy Execution Rundll32, Nordic Defender

Microsoft and FireEye Reveal New Malware Samples Tied to SolarWinds Attackers - SOC Prime

Hackers use a new technique in malspam campaigns to disable Macro security warnings in weaponized docs

Threat Intelligence Report

Rundll32: The Infamous Proxy for Executing Malicious Code

Rundll32: The Infamous Proxy for Executing Malicious Code